CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel related to KVM's handling of LBR MSRs, which were not properly saved and restored. This issue has been resolved by adding the appropriate MSRs to the list and allowing writes from userspace when LBR virtualization is enabled.

A vulnerability has been identified in the Linux kernel within the put_folios function that may lead to incorrect processing of physical addresses. The issue arises from an incorrect PFN to physical address conversion and missing checks in the cleanup loop.

A vulnerability in the Linux kernel that led to memory leaks in the rxkad_verify_response() function has been fixed. The changes ensure proper resource deallocation in all circumstances, preventing leaks.

A vulnerability has been identified in the Linux kernel related to duplicate resource teardown in the epf_ntb_epc_destroy() function. This may lead to system errors when the .allow_link operation fails or during the .drop_link execution.

A vulnerability has been identified in the Linux kernel that may lead to deadlocks in the damos_walk() function due to a race condition with the kdamond_fn() function. The issue arises from improper context management, potentially resulting in infinite waiting for request handling.

A vulnerability has been identified in the Linux kernel related to cacheline sharing for DMA buffers in the hwmon module. This issue may occur depending on the architecture when the transfer buffer shares a cacheline with a mutex.

In the Linux kernel, a vulnerability related to a resource leak in the xfs_alloc_buftarg() function has been fixed. In the error path, fs_put_dax() is called to drop the DAX device reference.

A vulnerability has been identified in the Linux kernel that allows for unlimited node registration by the nameserver. This can lead to memory exhaustion if a malicious client starts registering random nodes.

A vulnerability has been identified in the ext2 filesystem of the Linux kernel that allows for the introduction of a corrupted inode with zero link count and non-zero mode. This case, which should be rejected, can lead to improper filesystem behavior.

A vulnerability related to RESPONSE packet handling at the connection level has been fixed in the Linux kernel. Security issues could lead to decrypted packet data being exposed to packet sniffers.

A vulnerability in the Linux kernel has been fixed related to the missing put_disk() call when device_add(&disk_dev) fails. This bug resulted in the scsi_disk being freed while the gendisk remained referenced.

A vulnerability has been identified in the Linux kernel related to the LoongArch architecture, concerning the syscall dispatch table. The lack of an array_index_nospec() boundary allows access to syscall function pointers beyond the allowed range.

A vulnerability has been identified in the Linux kernel's krealloc() function that may lead to data loss and buffer overflow during object resizing. These issues arise from improper size management during NUMA migration and when shrinking objects.

A vulnerability has been identified in the Linux kernel related to KVM, concerning the synchronization of interrupt state in nested virtual machines. The issue arises when KVM_SET_VCPU_EVENTS is called before KVM_SET_NESTED_STATE, potentially leading to a hang of the vCPU in L2.

A vulnerability related to a memory leak in the cc_mac_digest() function has been identified in the Linux kernel. A fix has been implemented that adds the cc_unmap_result() function in case cc_map_hash_request_final() fails.

A vulnerability has been identified in the ext4 filesystem within the Linux kernel that occurs during block allocation in DIO mode. The issue arises from improper setting of the EXT4_GET_BLOCKS_CONVERT flag, which may lead to stale data problems.

A vulnerability has been identified in the Linux kernel related to NFSv4 request handling. Delays in idmap upcall responses can lead to request rejections, resulting in client session errors.

In the Linux kernel, a vulnerability related to NULL pointer dereference in the acpi_ev_address_space_dispatch() function has been fixed. A new check has been added to cover a missed execution path.

A vulnerability in the Linux kernel related to device lifecycle handling in the `css_alloc_subchannel()` function has been fixed. The issue was that in case of a DMA mask setup failure, the subchannel structure was freed without proper reference management to the device model.

A vulnerability in the Linux kernel related to amdgpu has been resolved, which occurred under low memory conditions. In such situations, the kmalloc function could fail, requiring the mutex to be unlocked for a clean exit.