CVE-2021-47256

CVE-2021-47256 stems from a Linux kernel memory_failure fix where a missing wait for page writeback could leave inode i_wb_list in an inconsistent state, triggering a BUG_ON in clear_inode and kernel panic. Connected advisories describe the root cause: after end_page_writeback, inode->i_wb_lis...

CVE-2021-47252

CVE-2021-47252 affects the Linux kernel batman-adv subsystem. The soft/batadv interface for a queued OGM could be modified between queuing and transmission, with WARN_ON used for kernel bugs rather than warnings. The vulnerability’s description and fixes are documented in connected advisories; th...

CVE-2021-47253

CVE-2021-47253 affects the Linux kernel’s DRM/AMD display path, where DMUB hw_init could leak memory on suspend/resume due to kzalloc allocation without guard. The fix ensures the DC wrapper memory is only allocated if it was not previously allocated, avoiding reallocation on suspend/resume. Docu...

CVE-2021-47250

CVE-2021-47250: memory leak in Linux kernel netlbl_cipsov4_add_std. The memory for doi_def->map.std allocated in netlbl_cipsov4_add_std is not freed anywhere; it should be freed in cipso_v4_doi_free, which frees the cipso DOI resource. This vulnerability detail is consistently described in con...

CVE-2021-47249

CVE-2021-47249 concerns a memory-leak in the Linux kernel’s net: rds path, fixed by correcting refcount handling in rds_recvmsg. The issue occurred when an error happened in rds_cmsg_recv(): after a successful rds_next_incoming(rs, &inc) the code would increment inc’s refcount, but on failure to ...

CVE-2021-47245

CVE-2021-47245 affects the Linux kernel netfilter synproxy TCP option parser. The vulnerability arises from an out-of-bounds read in synproxy_parse_options when parsing TCP options; if length equals 1, the loop reads an opcode byte and, if it is not TCPOPT_EOL or TCPOPT_NOP, reads one more byte, ...

CVE-2021-47243

The CVE-2021-47243 issue concerns the Linux kernel's cake_qdisc TCP option parser. Affected code paths cake_get_tcpopt and cake_tcph_may_drop could read one byte out of bounds when processing TCP options, particularly if the option length is 1, leading to a second read for opcodes not equal to TC...

CVE-2021-47241

The CVE-2021-47241 issue is a Linux kernel vulnerability related to ethtool: strset: fix message length calculation. The root cause is that the outer nest for ETHTOOL_A_STRSET_STRINGSETS was not accounted for, which could cause ETHTOOL_MSG_STRSET_GET to emit a warning and potentially trigger a sp...

CVE-2021-47235

CVE-2021-47235 affects the Linux kernel net/ethernet path: ec_bhf_remove() uses priv (netdev private data) after free_netdev() is called, enabling a use-after-free. The fixed sequence moves free_netdev() to occur after the PCI I/O unmaps (pci_iounmap) of priv, preventing access to freed memory. D...

CVE-2021-47236

CVE-2021-47236 : Linux kernel vulnerability in net:cdc_eem skb leak during USBNet transmission has been resolved. Root cause: in eem_tx_fixup(), original skb was not freed when skb_copy_expand() failed, allowing a leak if the clone status was not free’d. The fix frees the original skb in eem_tx_f...

CVE-2021-47234

CVE-2021-47234 (Linux kernel) : The issue concerns the phy-mtk-tphy driver, specifically in the mtk_phy_init() error path, where resources could leak. The fix adds a call to clk_disable_unprepare() in the error handling to release resources and prevent leaks. The vulnerability description and con...

CVE-2021-47232

CVE-2021-47232 is a Linux kernel issue where a skb is taken from the per-session j1939 skb queue without incrementing the ref count, leading to a Use-after-Free if the skb is concurrently used. The patch "can: j1939: fix Use-after-Free, hold skb ref while in use" fixes this by holding a reference...

CVE-2021-47229

CVE-2021-47229 concerns the Linux kernel PCI aardvark driver. A kernel panic could occur when a new PIO transfer is started before the previous one finished; the kernel will issue an External Abort/SSeror interrupt leading to a reboot. The root cause analysis noted a previously added Trusted Firm...

CVE-2024-4452

CVE-2024-4452 affects ElementsKit Pro for WordPress. A stored XSS exists in the url parameter up to version 3.6.1 due to insufficient input sanitization and output escaping. Exploitation requires contributor+ permissions; an authenticated attacker can inject scripts that execute when users view i...

CVE-2024-35386

CVE-2024-35386 affects Cesanta mjs 2.20.0. The issue is in the mjs_do_gc function (mjs.c) and enables remote attackers to cause a denial of service. The CVSS v3.1 base score is 7.5 (Network, Low complexity, No privileges, no user interaction; Availability impact). Public details consistently desc...

CVE-2023-3942

CVE-2023-3942 is a documented SQL injection in ZKTeco-based OEM devices, caused by improper neutralization of SQL elements. Affected products include ZKTeco ProFace X and Smartec ST-FR043/ST-FR041ME, with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and related Standalone service 2.1.6-20200907, per m...

CVE-2024-4420

CVE-2024-4420 documents a Denial-of-Service in Google Tink-cc, affecting versions prior to 2.1.3. The vulnerability stems from the crypto::tink::JsonKeysetReader when fed inputs that are valid JSON elements but not encoded JSON objects (e.g., a number or an array), causing a crash, and potentiall...

CVE-2023-3941

CVE-2023-3941 describes a Relative Path Traversal vulnerability in ZkTeco-based OEM devices (including ZkTeco ProFace X and Smartec ST-FR043/041ME) affecting firmware with version ZAM170-NF-1.8.25-7354-Ver1.0.0 (and possibly others). The flaw allows an attacker to write arbitrary files on the dev...

CVE-2024-4700

The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button element in all versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to...

CVE-2024-4988

The CVE-2024-4988 entry concerns the mobile app com.transsion.videocallenhancer, where improper permission control in the app interface can lead to private file leakage. Red Hat/NVD/CVE references align on a vulnerability in the Transsion TECNO mobile software stack, with public detail indicating...