CVE Vulnerability Catalog

In the Linux kernel, the ALSA control function snd_ctl_elem_init_enum_names() lacks validation of buf_len before calling strnlen(). When buf_len reaches zero but items remain, calling strnlen(p, 0) with CONFIG_FORTIFY_SOURCE enabled may cause a kernel panic (BRK exception) instead of safely handling the error.

A memory leak was discovered in the Linux kernel's DAMON/stat mechanism. When damon_start() fails, the DAMON context is not destroyed and the global pointer is not reset, leading to a permanent memory leak.

A vulnerability has been identified in the Linux kernel that allows inconsistent reads of local FDB entries in bridges. The issue arises from multiple loads of the `f->dst` value, which can lead to a NULL pointer dereference.

A vulnerability related to resource leaks during SPI device setup failure has been fixed in the Linux kernel. It is important to call the controller cleanup() if spi_setup() fails.

A vulnerability in the Linux kernel has been resolved that affects KVM and SVM. The issue was that the INVLPGA instruction did not trigger a #UD error when EFER.SVME was set to 0.

A vulnerability in the Linux kernel related to the ocfs2 filesystem has been resolved, concerning dio operations. The issue involved exceeding the credit limit during write operations, which could lead to warnings in JBD2.

A vulnerability was identified in the Linux kernel that led to a null pointer dereference when device_add_disk() failed after device_add() succeeded. This issue has been resolved by correctly managing the device removal order.

A vulnerability related to DMA synchronization in the atmel-tdes module has been fixed in the Linux kernel. Incorrect use of the sync direction may lead to stale cache data being returned on non-coherent platforms.

A vulnerability related to memory leaks on probe failures has been fixed in the Linux kernel. In case of errors, it is necessary to deregister the controller, disable pins, and kill and free the RX URB to avoid memory leaks and use-after-free.

A vulnerability in the Linux kernel related to the missing call to usb_kill_urb() on signal interrupt has been fixed. This bug led to reading from an invalid transfer buffer when no data was received from the device.

A vulnerability has been identified in the Linux kernel within the run_unpack() function, which does not validate buffer boundaries before reading data. As a result, a crafted NTFS image can lead to out-of-bounds memory reads, potentially allowing unauthorized access to memory.

A vulnerability in the Linux kernel related to KVM and nSVM has been resolved, concerning the improper clearing of VMCB_LBR in vmcb12. The svm_copy_lbrs() function always marked VMCB_LBR as dirty in the destination VMCB, leading to architecturally undefined behavior.

A vulnerability has been identified in the Linux kernel related to incorrect counting of operations when buffer allocation fails for encrypted files in CephFS. When buffer allocation fails, the operation count is incremented, leading to a kernel panic.

A vulnerability has been identified in the Linux kernel that may lead to deadlock during sigreturn operations in the context of the shadow stack. The issue arises when the kernel attempts to access shadow stack memory, potentially leading to a situation where two processors try to acquire locks, resulting in a deadlock.

A vulnerability has been identified in the Linux kernel that leads to deadlock in the jbd2_journal_cancel_revoke() function. A change introduced in commit f76d4c28a46a breaks lock ordering, which can lead to an ABBA situation when the filesystem blocksize is smaller than the pagesize.

A vulnerability has been identified in the Linux kernel related to improper IRQ cleanup during device initialization failure. When adf_dev_up() partially completes and fails, IRQ handlers are not detached before MSI-X vectors are released.

A vulnerability in the Linux kernel has been resolved in KVM regarding the use of NextRIP in vmcb02 after the first L2 VMRUN. The issue occurs when NRIPS is disabled, leading to incorrect NextRIP settings.

A vulnerability in the Linux kernel has been fixed in the retry_aligned_read() function, which could lead to an infinite loop and soft lockup when encountering an overlapped stripe.

A vulnerability has been identified in the Linux kernel that leads to deadlock during RAID10 array check operations when NOWAIT requests are simultaneously executed. The issue arises from improper management of the nr_pending value, resulting in underflow and blocking of the sync thread.

A vulnerability has been identified in the Linux kernel within the ALSA module that may lead to an infinite loop due to the lack of pll_rate updates. The issue occurs when spdif_passthru_playback_setup() skips atc_pll_init() for a frequency of 32000 Hz.