CVE Vulnerability Catalog

In the Linux kernel, a deadlock was found in the gpio:shared driver during parent proxy removal. The issue was caused by an overly wide critical section of the mutex protecting the offset field.

In the i2c:davinci driver in the Linux kernel, a missing 'clock-frequency' device tree property caused a division by zero. The default value was defined in kHz instead of Hz, leading to a kernel panic.

In the pch_uart serial driver in the Linux kernel, the return value of dma_alloc_coherent() was not checked. A failed allocation could lead to a NULL pointer dereference.

In the Linux kernel USB gadget UVC driver, a vulnerability was found due to missing lock synchronization when walking the extension units list during function binding. The uvc_function_bind() function traverses the list without holding opts->lock, which can race with configfs operations and lead to use-after-free.

In the Linux kernel, the DRM MSM DSI driver has a vulnerability where memory dumping can access past the mapped region due to an unadjusted size. This can lead to accessing unmapped memory.

In the tps65219 voltage regulator driver in the Linux kernel, the irq_data.rdev field is not assigned, causing undefined behavior when the IRQ handler calls regulator_notifier_call_chain(). This can lead to an Oops error.

In the Linux kernel, a vulnerability was found in the TLB invalidation mechanism on x86 architecture. When booting with 'nopcid' (disabling PCID), broadcast TLB invalidation (INVLPGB) can still be used with a non-zero PCID, causing a general protection fault (#GP) and system crash.

In the Linux kernel, the ethtool PHY helper has a NULL pointer dereference vulnerability when the PHY driver is unbound via sysfs. The phy_remove() function clears the drv pointer but does not detach the device, causing a crash when reading the driver name.

In the Linux kernel, several ACPI platform drivers lack a NULL check for the ACPI companion object. Since any platform driver can be forced to match a non-ACPI device, this can lead to errors.

In the Linux kernel's device property subsystem, a vulnerability was found due to an uninitialized secondary pointer in the fwnode structure. If a node is initialized via fwnode_init() without zeroing memory, the pointer may contain garbage, leading to dereference.

In the Linux kernel's MSM graphics driver (drm/msm/a6xx), a NULL pointer dereference vulnerability was found in a8xx_hfi_send_perf_table. The function does not check the return value of kzalloc(), potentially leading to a crash on memory allocation failure.

In the Linux kernel for PowerPC, redundant preempt_disable()/preempt_enable() calls were removed from arch_irq_work_raise(). They caused a kernel panic when handling machine check exceptions (MCE) in real mode, as accessing the preempt_count in this context is invalid.

In the Linux kernel, the lm90 driver's lm90_alert() function lacks proper locking when modifying configuration registers in the SMBus alert context. Concurrent sysfs writes can overwrite these changes, re-enabling the alert line and causing an interrupt storm.

In the iwlwifi driver (Linux kernel), the function iwl_mld_remove_link() dereferences the link pointer before checking for NULL, potentially causing a memory access violation.

In the Linux kernel's SRCU mechanism, during a state transition from CPU-0 to all-CPUs, workqueue handlers may be queued on CPUs that have never been online, causing hangs on s390 systems.

Reflected XSS vulnerability in Polen Media Software and Information Services Website Template before v2 due to improper input neutralization during page generation.

Vulnerability in Zephyr's ext2 file system allows a DoS attack via a crafted ext2 image. The superblock validator does not check if s_blocks_per_group and s_inodes_per_group are non-zero, leading to division by zero during mount. On ARMv7-M/ARMv8-M platforms, this causes a fatal error and denial of service.

Path traversal vulnerability in the Datasets library up to version 5.0.0. The file_name metadata field is not properly validated before being joined to the dataset directory, allowing attackers to read arbitrary local files using '../' sequences.

Vulnerability in lakeFS up to version 1.83.0 allows authentication bypass in the /setup_comm_prefs endpoint. Unauthenticated attackers can overwrite operator metadata including email, name, and company, and modify security update preferences.

Vulnerability in Jan up to version 0.8.4 due to a CORS misconfiguration in the local API server. The server replaces trusted hosts with a wildcard, allowing network-adjacent attackers to access the unauthenticated OpenAI-compatible API.