deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-41019
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Validate ff offset

This adds sanity checks for ff offset. There is a check
on rt->first_free at first, but walking through by ff
without any check. If the second ff is a large offset.
We may encounter an out-of-bound read.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://git.kernel.org/stable/c/35652dfa8cc9a8a900ec0f1e0395781f94ffc5f0; https://git.kernel.org/stable/c/50c47879650b4c97836a0086632b3a2e300b0f06; https://git.kernel.org/stable/c/617cf144c206f98978ec730b17159344fd147cb4
CVE: CVE-2024-41090
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

tap: add missing verification for short frame

The cited commit missed to check against the validity of the frame length
in the tap_get_user_xdp() path, which could cause a corrupted skb to be
sent downstack. Even before the skb is transmitted, the
tap_get_user_xdp()-->skb_set_network_header() may assume the size is more
than ETH_HLEN. Once transmitted, this could either cause out-of-bound
access beyond the actual length, or confuse the underlayer with incorrect
or inconsistent header length in the skb metadata.

In the alternative path, tap_get_user() already prohibits short frame which
has the length less than Ethernet header size from being transmitted.

This is to drop any frame shorter than the Ethernet header size just like
how tap_get_user() does.

CVE: CVE-2024-41090
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/73d462a38d5f782b7c872fe9ae8393d9ef5483da; https://git.kernel.org/stable/c/7431144b406ae82807eb87d8c98e518475b0450f; https://git.kernel.org/stable/c/8be915fc5ff9a5e296f6538be12ea75a1a93bdea
CVE: CVE-2024-41091
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

tun: add missing verification for short frame

The cited commit missed to check against the validity of the frame length
in the tun_xdp_one() path, which could cause a corrupted skb to be sent
downstack. Even before the skb is transmitted, the
tun_xdp_one-->eth_type_trans() may access the Ethernet header although it
can be less than ETH_HLEN. Once transmitted, this could either cause
out-of-bound access beyond the actual length, or confuse the underlayer
with incorrect or inconsistent header length in the skb metadata.

In the alternative path, tun_get_user() already prohibits short frame which
has the length less than Ethernet header size from being transmitted for
IFF_TAP.

This is to drop any frame shorter than the Ethernet header size just like
how tun_get_user() does.

CVE: CVE-2024-41091
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/049584807f1d797fc3078b68035450a9769eb5c3; https://git.kernel.org/stable/c/32b0aaba5dbc[PII_REDACTED]7d9b5d45a22eae82e9; https://git.kernel.org/stable/c/589382f50b4a5d90d16d8bc9dcbc0e927a3e39b2
CVE: CVE-2024-7187
Published: 2024-07-29
Description: A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. It has been declared as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272608. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/A3600R/UploadCustomModule.md; https://vuldb.com/?ctiid.272608; https://vuldb.com/?id.272608
CVE: CVE-2024-7188
Published: 2024-07-29
Description: A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the component GET Parameter Handler. The manipulation of the argument range2 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272609 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/bigb0x/CVEs/blob/main/quicklancer-2-4.md; https://vuldb.com/?ctiid.272609; https://vuldb.com/?id.272609
CVE: CVE-2024-7189
Published: 2024-07-29
Description: A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-272610 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/L1OudFd8cl09/CVE/blob/main/25_07_2024_a.md; https://vuldb.com/?ctiid.272610; https://vuldb.com/?id.272610
CVE: CVE-2024-7190
Published: 2024-07-29
Description: A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/get_price.php. The manipulation of the argument expenses_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272611.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/DeepMountains/Mirage/blob/main/CVE7-4.md; https://vuldb.com/?ctiid.272611; https://vuldb.com/?id.272611
CVE: CVE-2024-41139
Published: 2024-07-29
Description: Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266
References: https://jvn.jp/en/jp/JVN84326763/; https://www.skyseaclientview.net/news/240729_02/; https://jvn.jp/en/jp/JVN84326763/
CVE: CVE-2024-41143
Published: 2024-07-29
Description: Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-346, CWE-346
References: https://jvn.jp/en/jp/JVN84326763/; https://www.skyseaclientview.net/news/240729_02/; https://jvn.jp/en/jp/JVN84326763/
CVE: CVE-2024-41726
Published: 2024-07-29
Description: Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN84326763/; https://www.skyseaclientview.net/news/240729_02/; https://jvn.jp/en/jp/JVN84326763/
CVE: CVE-2024-41881
Published: 2024-07-29
Description: SDoP versions prior to 1.11 fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability. When a user of the affected product is tricked to process a specially crafted XML file, arbitrary code may be executed on the user's environment.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/PhilipHazel/SDoP; https://github.com/PhilipHazel/SDoP/commit/ff83d851b4b39ff2fd37ab2ab[PII_REDACTED]b023; https://jvn.jp/en/jp/JVN16420523/
CVE: CVE-2024-7191
Published: 2024-07-29
Description: A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/get_balance.php. The manipulation of the argument student_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272612.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/DeepMountains/Mirage/blob/main/CVE7-5.md; https://vuldb.com/?ctiid.272612; https://vuldb.com/?id.272612
CVE: CVE-2024-7192
Published: 2024-07-29
Description: A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272613 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/DeepMountains/Mirage/blob/main/CVE7-6.md; https://vuldb.com/?ctiid.272613; https://vuldb.com/?id.272613
CVE: CVE-2024-7193
Published: 2024-07-29
Description: A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tak_deco_lib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.26e is able to address this issue. It is recommended to upgrade the affected component. VDB-272614 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early, responded in a very professional manner and immediately released a fixed version of the affected product.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-427
References: https://app.any.run/tasks/37401db6-5584-4f21-8cc5-73240c4ea2dc/; https://community.mp3tag.de/t/mp3tag-development-build-status/455/1; https://vuldb.com/?ctiid.272614
CVE: CVE-2024-7194
Published: 2024-07-29
Description: A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processing of the file check_student.php. The manipulation of the argument student_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272615.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/DeepMountains/Mirage/blob/main/CVE7-1.md; https://vuldb.com/?ctiid.272615; https://vuldb.com/?id.272615
CVE: CVE-2024-4848
Published: 2024-07-29
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-6761
Published: 2024-07-29
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-7195
Published: 2024-07-29
Description: A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/check_admin.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272616.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/DeepMountains/Mirage/blob/main/CVE7-2.md; https://vuldb.com/?ctiid.272616; https://vuldb.com/?id.272616
CVE: CVE-2024-7196
Published: 2024-07-29
Description: A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272617 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://gist.github.com/topsky979/7c314add775caa87b4db700e0bef7f35; https://vuldb.com/?ctiid.272617; https://vuldb.com/?id.272617
CVE: CVE-2024-7197
Published: 2024-07-29
Description: A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage_complaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-272618 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/756e52cd9cd53ddc78801d322c69b5f2; https://vuldb.com/?ctiid.272618; https://vuldb.com/?id.272618
CVE: CVE-2024-7198
Published: 2024-07-29
Description: A vulnerability classified as critical has been found in SourceCodester Complaints Report Management System 1.0. This affects an unknown part of the file /admin/manage_station.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272619.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/424d2ac58623b0fb4d5232a4ecbe5110; https://vuldb.com/?ctiid.272619; https://vuldb.com/?id.272619
CVE: CVE-2024-6124
Published: 2024-07-29
Description: Reflected XSS in M-Files Hubshare before version 5.0.6.0 allows an attacker to execute arbitrary JavaScript code in the context of the victim's browser session
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://empower.m-files.com/security-advisories/CVE-2024-6124; https://product.m-files.com/security-advisories/cve-2024-6124/; https://www.m-files.com/about/trust-center/security-advisories/cve-2024-6124/
CVE: CVE-2024-6881
Published: 2024-07-29
Description: Stored XSS in M-Files Hubshare versions before 5.0.6.0 allows an authenticated attacker to execute arbitrary JavaScript in user's browser session
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://empower.m-files.com/security-advisories/CVE-2024-6881; https://product.m-files.com/security-advisories/cve-2024-6881/; https://www.m-files.com/about/trust-center/security-advisories/cve-2024-6881/
CVE: CVE-2024-7199
Published: 2024-07-29
Description: A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file /admin/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272620.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://gist.github.com/topsky979/75ba3db98584b13d65d874e4fcac154b; https://vuldb.com/?ctiid.272620; https://vuldb.com/?id.272620
CVE: CVE-2024-7200
Published: 2024-07-29
Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Complaints Report Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_settings. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272621 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gist.github.com/topsky979/e8b6651dd[PII_REDACTED]0c8ed2305efd5; https://vuldb.com/?ctiid.272621; https://vuldb.com/?id.272621
CVE: CVE-2024-40576
Published: 2024-07-29
Description: Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/jubilianite/CVEs/blob/main/CVE-2024-40576.md; https://github.com/jubilianite/CVEs/security/advisories/GHSA-674x-j9wj-qvpp; https://www.sourcecodester.com/php/17375/best-courier-management-system-project-php.html
CVE: CVE-2024-41020
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

filelock: Fix fcntl/close race recovery compat path

When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when
fcntl/close race is detected"), I missed that there are two copies of the
code I was patching: The normal version, and the version for 64-bit offsets
on 32-bit kernels.
Thanks to Greg KH for stumbling over this while doing the stable
backport...

Apply exactly the same fix to the compat path for 32-bit kernels.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/4c43ad4ab41602201d34c66ac62130fe339d686f; https://git.kernel.org/stable/c/53e21cfa68a7d12de378b7116c75571f73e0dfa2; https://git.kernel.org/stable/c/5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02
CVE: CVE-2024-41021
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()

There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on
s390. Therefore we do not expect to see VM_FAULT_HWPOISON in
do_exception().

However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more
general"), it is possible to see VM_FAULT_HWPOISON in combination with
PTE_MARKER_POISONED, even on architectures that do not support HWPOISON
otherwise. In this case, we will end up on the BUG() in do_exception().

Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar
to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault
flags, for easier debugging.

Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot
support swap entries on other levels than PTE level.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0; https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff; https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b
CVE: CVE-2024-41022
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()

The "instance" variable needs to be signed for the error handling to work.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3; https://git.kernel.org/stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06; https://git.kernel.org/stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287
CVE: CVE-2024-6576
Published: 2024-07-29
Description: Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287
References: https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-July-2024-CVE-2024-6576; https://www.progress.com/moveit; https://community.progress.com/s/article/MOVEit-Transfer-Product-Security-Alert-Bulletin-July-2024-CVE-2024-6576
CVE: CVE-2024-6984
Published: 2024-07-29
Description: An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm.
CVSS Score: 8.8 (HIGH)
CWE: CWE-209, CWE-209
References: https://github.com/juju/juju/commit/da[PII_REDACTED]92a29ddf8d589468cf85ba3efaf2; https://github.com/juju/juju/security/advisories/GHSA-6vjm-54vp-mxhx; https://www.cve.org/CVERecord?id=CVE-2024-6984
CVE: CVE-2024-37906
Published: 2024-07-29
Description: Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.9, there is an SQL Injection in the `/adm_program/modules/ecards/ecard_send.php` source file of the Admidio Application. The SQL Injection results in a compromise of the application's database. The value of `ecard_recipients `POST parameter is being directly concatenated with the SQL query in the source code causing the SQL Injection. The SQL Injection can be exploited by a member user, using blind condition-based, time-based, and Out of band interaction SQL Injection payloads. This vulnerability is fixed in 4.3.9.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Admidio/admidio/commit/3ff02b0c64a6911ab3e81cd61077f392c0b25248; https://github.com/Admidio/admidio/security/advisories/GHSA-69wx-xc6j-28v3; https://github.com/Admidio/admidio/commit/3ff02b0c64a6911ab3e81cd61077f392c0b25248
CVE: CVE-2024-38529
Published: 2024-07-29
Description: Admidio is a free, open source user management system for websites of organizations and groups. In Admidio before version 4.3.10, there is a Remote Code Execution Vulnerability in the Message module of the Admidio Application, where it is possible to upload a PHP file in the attachment. The uploaded file can be accessed publicly through the URL `{admidio_base_url}/adm_my_files/messages_attachments/{file_name}`. The vulnerability is caused due to the lack of file extension verification, allowing malicious files to be uploaded to the server and public availability of the uploaded file. This vulnerability is fixed in 4.3.10.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://github.com/Admidio/admidio/commit/3b1cc1cda05747edebe15f2825b79bc5a673d94c; https://github.com/Admidio/admidio/security/advisories/GHSA-g872-jwwr-vggm; https://github.com/Admidio/admidio/commit/3b1cc1cda05747edebe15f2825b79bc5a673d94c
CVE: CVE-2024-41023
Published: 2024-07-29
Description: In the Linux kernel, the following vulnerability has been resolved:

sched/deadline: Fix task_struct reference leak

During the execution of the following stress test with linux-rt:

stress-ng --cyclic 30 --timeout 30 --minimize --quiet

kmemleak frequently reported a memory leak concerning the task_struct:

unreferenced object 0xffff8881305b8000 (size 16136):
  comm "stress-ng", pid 614, jiffies[PII_REDACTED] (age 286.412s)
  object hex dump (first 32 bytes):
    02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00  .@..............
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  debug hex dump (first 16 bytes):
    53 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00  S...............
  backtrace:
    [<[PII_REDACTED]6b6790>] dup_task_struct+0x30/0x540
    [<00000000c5ca0f0b>] copy_process+0x3d9/0x50e0
    [<00000000ced59777>] kernel_clone+0xb0/0x770
    [<00000000a50befdc>] __do_sys_clone+0xb6/0xf0
    [<000000001dbf2008>] do_syscall_64+0x5d/0xf0
    [<[PII_REDACTED]2900ff>] entry_SYSCALL_64_after_hwframe+0x6e/0x76

The issue occurs in start_dl_timer(), which increments the task_struct
reference count and sets a timer. The timer callback, dl_task_timer,
is supposed to decrement the reference count upon expiration. However,
if enqueue_task_dl() is called before the timer expires and cancels it,
the reference count is not decremented, leading to the leak.

This patch fixes the reference leak by ensuring the task_struct
reference count is properly decremented when the timer is canceled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/7a54d31face626f62de415ebe77b43f76c3ffaf4; https://git.kernel.org/stable/c/b58652db66c910c2245f5bee7deca41c12d707b9; https://git.kernel.org/stable/c/7a54d31face626f62de415ebe77b43f76c3ffaf4
CVE: CVE-2024-41024
Published: 2024-07-29
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.