CVE Vulnerability Catalog

In the Linux kernel, a NULL pointer dereference vulnerability was found in the Marvell Prestera network driver. The devlink_alloc() function may return NULL on allocation failure, but the code unconditionally calls devlink_priv() on the returned pointer, causing a system crash.

In the Linux kernel, the idpf driver has flawed error handling in the init_task during driver load. If init_task fails (e.g., CREATE_VPORT rejected by firmware), the driver ends up without vports and netdevs, and a subsequent reset causes a NULL pointer dereference and kernel crash.

In the Linux kernel, the at_hdmac driver has a device reference leak in of_dma_xlate(). The reference taken when looking up the DMA platform device is not dropped after successful channel allocation, causing a memory leak.

A vulnerability in the Linux kernel's BCM-SBA-RAID DMA driver causes a device reference leak during probe. The driver fails to drop the reference taken when looking up the mailbox device on probe failures or driver unbind.

In the Linux kernel, a vulnerability in the dw_dmamux DMA driver causes an OF node reference leak on late DMA route allocation failure. The reference taken to the DMA master OF node is not released when route allocation fails after the initial setup.

W jądrze Linuxa naprawiono podatność związaną z wyciekiem urządzenia podczas alokacji trasy w module dmaengine dla lpc18xx-dmamux. Problem polegał na tym, że utrzymywanie referencji do urządzenia nie zapobiegało usunięciu danych sterownika.

In the Linux kernel, a device reference leak was found in the STM32 DMA MUX driver during route allocation. The allocation function failed to drop the reference taken when looking up the DMA mux platform device.

In the Linux kernel, a device reference leak was found in the DMA crossbar driver for TI AM335x. The reference to the crossbar platform device was not dropped during route allocation, causing a memory leak.

In the Linux kernel, the btrfs filesystem has a NULL dereference on root when tracing inode eviction. In btrfs_evict_inode(), root may be NULL, but tracing setup tries to fetch its ID before the check. The fix sets root_objectid to 0 when root is NULL, allowing tracing even in that case.

In the Linux kernel CAN j1939 subsystem, j1939_session_activate() could succeed even after the network device was unregistered, causing a usage count leak and hangs in unregister_netdevice. The fix checks ndev->reg_state under the session list lock, closing the race window.

W libexpat przed wersją 2.7.4 funkcja doContent nieprawidłowo określa rozmiar bufora bufSize, ponieważ brakuje sprawdzenia przepełnienia całkowitego przy reallocacji bufora tagów.

A flaw in Zephyr's network stack allows an IPv4 packet containing ICMP type 128 to be misclassified as an ICMPv6 Echo Request. This results in an out-of-bounds memory read and creates a potential information-leak vulnerability in the networking subsystem.

GOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through message subjects. Attackers can craft messages with embedded JavaScript that will execute when an administrator reads the message, potentially stealing session cookies or executing client-side attacks.

Podatność typu Session Fixation w systemie QR Menu Pro Smart Menu Systems Menu Panel umożliwia przejęcie sesji. Problem ten dotyczy Menu Panel do 29012026.

Podatność CVE-2025-7013 dotyczy systemu Menu Panel w QR Menu Pro, gdzie możliwe jest obejście autoryzacji poprzez wykorzystanie kluczy kontrolowanych przez użytkownika. Umożliwia to wykorzystanie zaufanych identyfikatorów.

Podatność typu Session Fixation w oprogramowaniu QR Menu firmy Akın Software Computer Import Export Industry and Trade Ltd. pozwala na przejęcie sesji użytkownika. Problem ten dotyczy wersji QR Menu przed s1.05.12.

During the TLS 1.3 handshake, if multiple messages are sent in records that span encryption level boundaries (e.g., Client Hello and Encrypted Extensions), subsequent messages may be processed before the encryption level changes. This can cause minor information disclosure.

The archive/zip package uses a super-linear file name indexing algorithm invoked the first time a file in an archive is opened. Consuming a maliciously constructed ZIP archive can lead to a denial of service.

A segmentation violation in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

A division-by-zero vulnerability was found in the flow.floor_divide() component of OneFlow v0.9.0. An attacker can cause a Denial of Service (DoS) by providing a crafted input tensor containing zero.