CVE Vulnerability Catalog

In the Linux kernel on ARM64 with 64KB base pages, the PMD size (HPAGE_PMD_ORDER=13) exceeds xarray capabilities, causing a warning and failure when attempting to create a PMD-sized page cache. The fix skips allocating PMD-sized page cache when its size is larger than MAX_PAGECACHE_ORDER and falls back to the regular readahead path.

A reference leak in the task_struct structure exists in the Linux kernel's deadline scheduler. When enqueue_task_dl() cancels the timer before it expires, the reference count is not decremented, causing a memory leak.

A Cross-Site Request Forgery (CSRF) vulnerability was found in ProcessWire version 3.0.229, allowing a remote attacker to insert a comment. The supplier disputes this, stating the product intentionally accepts anonymous, unauthenticated comments and that submitted comments are held for moderator review by default.

Podatność CVE-2024-5625 dotyczy niewłaściwego ograniczenia odniesienia do zewnętrznych jednostek XML w konsoli zarządzania Apinizer firmy PruvaSoft, co pozwala na eksplozję jednostek zewnętrznych podczas serializacji danych.

Podatność CVE-2024-5620 w konsoli zarządzania Apinizer firmy PruvaSoft umożliwia obejście uwierzytelniania poprzez alternatywną ścieżkę lub kanał. Problem ten dotyczy wersji przed 2024.05.1.

W SDK Pythona dla Sentry.io (sentry-sdk) w wersjach poniżej 2.8.0 występuje błąd, który pozwala na przekazywanie zmiennych środowiskowych do procesów podrzędnych, mimo ustawienia `env={}`. Problem ten został naprawiony w wersji 2.8.0 SDK.

dbt enables data analysts and engineers to transform data. When a user installs a package in dbt, it can override macros, materializations, and other core components by design, but a malicious package could override these with harmful code. This issue is fixed in versions 1.8.0, 1.6.14, and 1.7.14.

In the Linux kernel block subsystem, blkcg_init_queue() may add rq qos structures to a request queue, but blk_cleanup_queue() does not release them when the queue has no disk (e.g., un-present SCSI LUNs, NVMe admin queue). This causes a memory leak.

In the Linux kernel, the qedf driver for Fibre Channel adapters did not initialize delayed work (stag work) for all virtual ports (vports). This caused a warning in the workqueue system and issues with only 32 out of 64 NPIV ports appearing online. The fix initializes this work for all vports.

In the Linux kernel, a reference count issue was found in the qedf (QLogic Fibre Channel) driver when a LOGO request is received during a Task Management Function (TMF). This leads to hung I/O operations and a hung task warning. The fix addresses the reference count problem.

W OpenJPEG znaleziono lukę, która może prowadzić do wyczerpania zasobów w funkcji opj_t1_decode_cblks w pliku tcd.c. Wykorzystanie specjalnie przygotowanego pliku graficznego może spowodować odmowę usługi.

A flaw was found in OpenJPEG where maliciously constructed pictures can cause the program to enter a large loop and continuously print warning messages on the terminal.

A memory leak exists in the Linux kernel's netrom module within the nr_heartbeat_expiry() function. The issue occurs because sock_hold() is called even for sockets with the SOCK_DESTROY flag set, preventing the reference from being released and causing a memory leak.

In the Linux kernel, netpoll_owner_active() has a race condition due to a non-atomic read of the napi->poll_owner field. This can lead to data inconsistency when checking if the current CPU is the lock owner.

In the Linux kernel, the kprobes and synth event generation test modules, when built-in instead of loadable modules, leave events locked in the kernel and never removed. This causes kprobe self-test failure and ftracetest failures. The fix is to build these tests only as modules.

A vulnerability in the Linux kernel's ext4 filesystem involves accessing an uninitialized lock in the ratelimit_state structure during filesystem mount. Sysfs registration occurs before full initialization, allowing the interval to be changed via the msg_ratelimit_interval_ms interface and triggering an error when the uninitialized lock is accessed.

In the Linux kernel, a vulnerability was resolved in net/sched: act_api where tcf_idr_check_alloc() could cause an infinite loop. When a request to add multiple actions with the same index was sent, the second request would block forever on the first, holding rtnl_lock and causing tasks to hang.

In the Linux kernel, a vulnerability was resolved in netfilter ipset where when destroying all sets during pernet exit phase, the required check in rcu_dereference_protected() in ip_set_dereference() was missing.

In the Linux kernel, a vulnerability was fixed in platform/x86: x86-android-tablets where devices were not unregistered in reverse order. This caused warnings in the regulator subsystem when a regulator was unregistered while consumers still held references. The fix ensures devices are unregistered in reverse order.

In the Linux kernel, the mtk-vcodec driver has a potential NULL pointer dereference in SCP. The return value of devm_kzalloc() needs to be checked to avoid this issue. Similar to CVE-2022-3113.