deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-26300
Published: 2024-02-27
Description: A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.


CVSS Score: 6.6 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE: CVE-2024-26301
Published: 2024-02-27
Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.


CVSS Score: 6.5 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE: CVE-2024-26302
Published: 2024-02-27
Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.


CVSS Score: 4.8 (MEDIUM)
CWE: CWE-276
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt
CVE: CVE-2024-1892
Published: 2024-02-28
Description: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker can cause a denial-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potentially rendering services that utilize Scrapy for XML processing unresponsive.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1333
References: https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5; https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b; https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5
CVE: CVE-2024-1932
Published: 2024-02-28
Description: Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-434
References: https://huntr.com/bounties/fefd711e-3bf0-4884-9acc-167649c1f9a2; https://huntr.com/bounties/fefd711e-3bf0-4884-9acc-167649c1f9a2
CVE: CVE-2023-50303
Published: 2024-02-28
Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  273333.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/273333; https://www.ibm.com/support/pages/node/7116120; https://exchange.xforce.ibmcloud.com/vulnerabilities/273333
CVE: CVE-2023-50734
Published: 2024-02-28
Description: A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-121
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html; https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2023-50735
Published: 2024-02-28
Description: A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-465
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html; https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2023-50736
Published: 2024-02-28
Description: A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-131
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html; https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2023-50737
Published: 2024-02-28
Description: The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html; https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2024-0550
Published: 2024-02-28
Description: A user who is privileged already `manager` or `admin` can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files.

The attacker would have to have been granted privileged permissions to the system before executing this attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://github.com/mintplex-labs/anything-llm/commit/e1dcd5ded010b03abd6aa32d1bf0668a48e38e17; https://huntr.com/bounties/c6afeb5e-f211-4b3d-aa4b-6bad734217a6; https://github.com/mintplex-labs/anything-llm/commit/e1dcd5ded010b03abd6aa32d1bf0668a48e38e17
CVE: CVE-2024-22723
Published: 2024-02-28
Description: Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "media_folder" parameter in the URL, an attacker (in this case, an administrator) can navigate beyond the intended directory (the 'media/' directory) to access sensitive files in other parts of the application's file system.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-31
References: https://cupc4k3.medium.com/cve-2024-22723-webtrees-vulnerability-uncovering-sensitive-data-through-path-traversal-7442e7a38b68; https://cupc4k3.medium.com/cve-2024-22723-webtrees-vulnerability-uncovering-sensitive-data-through-path-traversal-7442e7a38b68
CVE: CVE-2024-1388
Published: 2024-02-28
Description: The Yuki theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_customizer_options() function in all versions up to, and including, 1.3.13. This makes it possible for authenticated attackers, with subscriber-level access and above, to reset the theme's settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://themes.trac.wordpress.org/changeset/217428/yuki/1.3.14/inc/extensions/class-reset-extension.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/d964e0ef-f14e-463b-bf4e-3f25788df03c?source=cve; https://themes.trac.wordpress.org/changeset/217428/yuki/1.3.14/inc/extensions/class-reset-extension.php
CVE: CVE-2024-1568
Published: 2024-02-28
Description: The Seraphinite Accelerator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.20.52 via the OnAdminApi_HtmlCheck function. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://plugins.trac.wordpress.org/changeset/3040707/seraphinite-accelerator; https://www.wordfence.com/threat-intel/vulnerabilities/id/07287a85-df00-408a-8b02-978fd3116155?source=cve; https://plugins.trac.wordpress.org/changeset/3040707/seraphinite-accelerator
CVE: CVE-2024-1943
Published: 2024-02-28
Description: The Yuki theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 1.3.14. This is due to missing or incorrect nonce validation on the reset_customizer_options() function. This makes it possible for unauthenticated attackers to reset the themes settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://themes.trac.wordpress.org/changeset/218603/yuki/1.3.15/inc/extensions/class-reset-extension.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/dfb760fb-f281-4649-9bd3-92f8e281f07e?source=cve; https://themes.trac.wordpress.org/changeset/218603/yuki/1.3.15/inc/extensions/class-reset-extension.php
CVE: CVE-2024-27913
Published: 2024-02-28
Description: ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash) via a malformed OSPF LSA packet, because of an attempted access to a missing attribute field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-909
References: https://github.com/FRRouting/frr/pull/15431; https://github.com/FRRouting/frr/pull/15431
CVE: CVE-2020-36778
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: xiic: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in xiic_xfer and xiic_i2c_remove.

However, pm_runtime_get_sync will increment the PM reference
count even failed. Forgetting to putting operation will result
in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/a42ac16e6573f19c78f556ea292f5b534fcc4514; https://git.kernel.org/stable/c/a85c5c7a3aa8041777ff691400b4046e56149fd3; https://git.kernel.org/stable/c/c977426db644ba[PII_REDACTED]97947979e8aba725
CVE: CVE-2020-36779
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in these stm32f7_i2c_xx serious functions.

However, pm_runtime_get_sync will increment the PM reference
count even failed. Forgetting to putting operation will result
in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/2c662660ce2bd3b09dae21a9a9ac9395e1e6c00b; https://git.kernel.org/stable/c/c323b270a52a26aa8038a4d1fd9a850904a41166; https://git.kernel.org/stable/c/c7ea772c9fcf711ed566814b92eecaffc0e2bfd0
CVE: CVE-2020-36780
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: sprd: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in sprd_i2c_master_xfer() and sprd_i2c_remove().

However, pm_runtime_get_sync will increment the PM reference
count even failed. Forgetting to putting operation will result
in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 4.7 (MEDIUM)
References: https://git.kernel.org/stable/c/3a4f326463117cee3adcb72999ca34a9aaafda93; https://git.kernel.org/stable/c/7e[PII_REDACTED]c5df9dfe6b436035a03673b0c1b9; https://git.kernel.org/stable/c/9223505e938ba3db5907e058f4209770cff2f2a7
CVE: CVE-2020-36781
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: imx: fix reference leak when pm_runtime_get_sync fails

In i2c_imx_xfer() and i2c_imx_remove(), the pm reference count
is not expected to be incremented on return.

However, pm_runtime_get_sync will increment pm reference count
even failed. Forgetting to putting operation will result in a
reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1ecc0ebc2ebbad4a22a670a07d27a21fa0b59c77; https://git.kernel.org/stable/c/3a0cdd336d92c429b51a79bf4f64b17eafa0325d; https://git.kernel.org/stable/c/47ff617217ca6a13194fcb35c6c3a0c57c080693
CVE: CVE-2020-36782
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in lpi2c_imx_master_enable.

However, pm_runtime_get_sync will increment the PM reference
count even failed. Forgetting to putting operation will result
in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/278e5bbdb9a94fa063c0f9bcde2479d0b8042462; https://git.kernel.org/stable/c/815859cb1d2302e74f11bf6894bceace9ca9eb4a; https://git.kernel.org/stable/c/b100650d80cd2292f6c152f5f2943b5944b3e8ce
CVE: CVE-2020-36783
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: img-scb: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in functions img_i2c_xfer and img_i2c_init.

However, pm_runtime_get_sync will increment the PM reference
count even failed. Forgetting to putting operation will result
in a reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/223125e37af8a641ea4a09747a6a52172fc4b903; https://git.kernel.org/stable/c/4734c4b1d9573c9d20bbc46cf37dde095ee011b8; https://git.kernel.org/stable/c/7ee35cde1e810ad6ca589980b9ec2b7b62946a5b
CVE: CVE-2020-36784
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

i2c: cadence: fix reference leak when pm_runtime_get_sync fails

The PM reference count is not expected to be incremented on
return in functions cdns_i2c_master_xfer and cdns_reg_slave.

However, pm_runtime_get_sync will increment pm usage counter
even failed. Forgetting to putting operation will result in a
reference leak here.

Replace it with pm_runtime_resume_and_get to keep usage
counter balanced.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/23ceb8462dc6f4b4decdb5536a7e5fc477cdf0b6; https://git.kernel.org/stable/c/[PII_REDACTED]8c94367e561fd878e5f0d3a0303585; https://git.kernel.org/stable/c/a45fc41beed8e0fe31864619c34aa00797fb60c1
CVE: CVE-2020-36785
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

media: atomisp: Fix use after free in atomisp_alloc_css_stat_bufs()

The "s3a_buf" is freed along with all the other items on the
"asd->s3a_stats" list.  It leads to a double free and a use after free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415, CWE-416
References: https://git.kernel.org/stable/c/801c1d505894008c888bc71d08d5cff5d87f8aba; https://git.kernel.org/stable/c/8267ccd7b9df7ab682043507dd682fe0621cf045; https://git.kernel.org/stable/c/ba11bbf303fafb33989e95473e409f6ab412b18d
CVE: CVE-2020-36786
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

media: [next] staging: media: atomisp: fix memory leak of object flash

In the case where the call to lm3554_platform_data_func returns an
error there is a memory leak on the error return path of object
flash.  Fix this by adding an error return path that will free
flash and rename labels fail2 to fail3 and fail1 to fail2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/27d2eab69f7da8e94e4751ac5c6d22d809275484; https://git.kernel.org/stable/c/4f0f37d03cde8f4341df8454f9b40a67fda94a33; https://git.kernel.org/stable/c/6045b01dd0e3cd3759eafe7f290ed04c957500b1
CVE: CVE-2020-36787
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

media: aspeed: fix clock handling logic

Video engine uses eclk and vclk for its clock sources and its reset
control is coupled with eclk so the current clock enabling sequence works
like below.

 Enable eclk
 De-assert Video Engine reset
 10ms delay
 Enable vclk

It introduces improper reset on the Video Engine hardware and eventually
the hardware generates unexpected DMA memory transfers that can corrupt
memory region in random and sporadic patterns. This issue is observed
very rarely on some specific AST2500 SoCs but it causes a critical
kernel panic with making a various shape of signature so it's extremely
hard to debug. Moreover, the issue is observed even when the video
engine is not actively used because udevd turns on the video engine
hardware for a short time to make a query in every boot.

To fix this issue, this commit changes the clock handling logic to make
the reset de-assertion triggered after enabling both eclk and vclk. Also,
it adds clk_unprepare call for a case when probe fails.

clk: ast2600: fix reset settings for eclk and vclk
Video engine reset setting should be coupled with eclk to match it
with the setting for previous Aspeed SoCs which is defined in
clk-aspeed.c since all Aspeed SoCs are sharing a single video engine
driver. Also, reset bit 6 is defined as 'Video Engine' reset in
datasheet so it should be de-asserted when eclk is enabled. This
commit fixes the setting.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1dc1d30ac101bb8335d9852de2107af60c2580e7; https://git.kernel.org/stable/c/2964c37563e86cfdc439f217eb3c5a69adfdba6a; https://git.kernel.org/stable/c/3536169f8531c2c5b153921dc7d1ac9fd570cda7
CVE: CVE-2021-46977
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: VMX: Disable preemption when probing user return MSRs

Disable preemption when probing a user return MSR via RDSMR/WRMSR.  If
the MSR holds a different value per logical CPU, the WRMSR could corrupt
the host's value if KVM is preempted between the RDMSR and WRMSR, and
then rescheduled on a different CPU.

Opportunistically land the helper in common x86, SVM will use the helper
in a future commit.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/31f29749ee970c251b3a7e5b[PII_REDACTED]40d089; https://git.kernel.org/stable/c/5104d7ffcf24749939bea7fdb5378d186473f890; https://git.kernel.org/stable/c/5adcdeb57007ccf8ab7ac20bf787ffb6fafb1a94
CVE: CVE-2021-46978
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: nVMX: Always make an attempt to map eVMCS after migration

When enlightened VMCS is in use and nested state is migrated with
vmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs
page right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr'
and we can't read it from VP assist page because userspace may decide
to restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state
(and QEMU, for example, does exactly that). To make sure eVMCS is
mapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES
request.

Commit f2c7ef3ba955 ("KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES
on nested vmexit") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to
nested_vmx_vmexit() to make sure MSR permission bitmap is not switched
when an immediate exit from L2 to L1 happens right after migration (caused
by a pending event, for example). Unfortunately, in the exact same
situation we still need to have eVMCS mapped so
nested_sync_vmcs12_to_shadow() reflects changes in VMCS12 to eVMCS.

As a band-aid, restore nested_get_evmcs_page() when clearing
KVM_REQ_GET_NESTED_STATE_PAGES in nested_vmx_vmexit(). The 'fix' is far
from being ideal as we can't easily propagate possible failures and even if
we could, this is most likely already too late to do so. The whole
'KVM_REQ_GET_NESTED_STATE_PAGES' idea for mapping eVMCS after migration
seems to be fragile as we diverge too much from the 'native' path when
vmptr loading happens on vmx_set_nested_state().
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/200a45649ab7361bc80c70aebf7165b64f9a6c9f; https://git.kernel.org/stable/c/bd0e8455b85b651a4c77de9616e307129b15aaa7; https://git.kernel.org/stable/c/c8bf64e3fb77cc19bad146fbe26651985b117194
CVE: CVE-2021-46979
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

iio: core: fix ioctl handlers removal

Currently ioctl handlers are removed twice. For the first time during
iio_device_unregister() then later on inside
iio_device_unregister_eventset() and iio_buffers_free_sysfs_and_mask().
Double free leads to kernel panic.

Fix this by not touching ioctl handlers list directly but rather
letting code responsible for registration call the matching cleanup
routine itself.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://git.kernel.org/stable/c/11e1cae5da4096552f7c091476cbadbc0d1817da; https://git.kernel.org/stable/c/901f84de0e16bde10a72d7eb2f2eb73fcde8fa1a; https://git.kernel.org/stable/c/ab6c935ba3a04317632f3b8b68675bdbaf395303
CVE: CVE-2021-46980
Published: 2024-02-28
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4

commit 4dbc6a4ef06d ("usb: typec: ucsi: save power data objects
in PD mode") introduced retrieval of the PDOs when connected to a
PD-capable source. But only the first 4 PDOs are received since
that is the maximum number that can be fetched at a time given the
MESSAGE_IN length limitation (16 bytes). However, as per the PD spec
a connected source may advertise up to a maximum of 7 PDOs.

If such a source is connected it's possible the PPM could have
negotiated a power contract with one of the PDOs at index greater
than 4, and would be reflected in the request data object's (RDO)
object position field. This would result in an out-of-bounds access
when the rdo_index() is used to index into the src_pdos array in
ucsi_psy_get_voltage_now().

With the help of the UBSAN -fsanitize=array-bounds checker enabled
this exact issue is revealed when connecting to a PD source adapter
that advertise 5 PDOs and the PPM enters a contract having selected
the 5th one.

[  151.545106][   T70] Unexpected kernel BRK exception at EL1
[  151.545112][   T70] Internal error: BRK handler: f2005512 [#1] PREEMPT SMP
...
[  151.545499][   T70] pc : ucsi_psy_get_prop+0x208/0x20c
[  151.545507][   T70] lr : power_supply_show_property+0xc0/0x328
...
[  151.545542][   T70] Call trace:
[  151.545544][   T70]  ucsi_psy_get_prop+0x208/0x20c
[  151.545546][   T70]  power_supply_uevent+0x1a4/0x2f0
[  151.545550][   T70]  dev_uevent+0x200/0x384
[  151.545555][   T70]  kobject_uevent_env+0x1d4/0x7e8
[  151.545557][   T70]  power_supply_changed_work+0x174/0x31c
[  151.545562][   T70]  process_one_work+0x244/0x6f0
[  151.545564][   T70]  worker_thread+0x3e0/0xa64

We can resolve this by instead retrieving and storing up to the
maximum of 7 PDOs in the con->src_pdos array. This would involve
two calls to the GET_PDOS command.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/1f4642b72be79757f050924a9b9673b6a02034bc; https://git.kernel.org/stable/c/5e9c6f58b01e6fdfbc740390c01f542a35c97e57; https://git.kernel.org/stable/c/a453bfd7ef15fd9d524004d3ca7b05353a302911