CVE-2023-52697

CVE-2023-52697: Linux kernel ASoC/Intel sof_sdw_rt_sdca_jack_common issue fixes double put of headset codec device. The root cause was multiple codecs sharing the same dai name (e.g., rt712-sdca-aif1) causing sof_sdw_rt_sdca_jack_exit() to be invoked twice via mc_dailink_exit_loop(). The fix ensu...

CVE-2023-52696

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opalpowercapinit kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2023-52694

CVE-2023-52694 relates to the Linux kernel drm/bridge tpd12s015 driver. The issue arises from marking tpd12s015_remove() with __exit, which causes the function to be discarded when the driver is built-in; on unbind, cleanup may be skipped, leading to resource leakage. The vulnerability was resolv...

CVE-2023-52693

The CVE-2023-52693 issue affects the Linux kernel ACPI video backlight code. Root cause: acpi_get_parent() can fail (e.g., acpi_ut_acquire_mutex() failure) and pass an uninitialized acpi_parent to acpi_get_pci_dev() during acpi_video_dev_register_backlight(). Impact: potential incorrect parent ha...

CVE-2023-52691

CVE-2023-52691 concerns the Linux kernel’s DRM AMD power management path. The issue is a double-free in the AMD GPU driver flow: when allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free fields, and if control flow re...

CVE-2023-52688

CVE-2023-52688 affects the Linux kernel wifi driver ath12k, where an error path in the core rfkill config fail path did not free allocated resources. The issue could cause resource leaks by not destroying the core pdev when rfkill config initialization fails. The accompanying fix adds a call to c...

CVE-2023-52687

CVE-2023-52687: In the Linux kernel, the crypto/safexcel path was updated to add error handling for dma_map_sg() calls. The dma_map_sg() macro may return 0 on error, and the patch adds checks for that failure and ensures previously mapped buffers are unmapped with dma_unmap_sg(). This issue was i...

CVE-2023-52685

CVE-2023-52685 is rejected and not an active vulnerability entry.

CVE-2023-52683

CVE-2023-52683: Linux kernel ACPI LPIT integer-overflow in lpit_update_residency() (tsc_khz > UINT_MAX/1000) fixed by replacing a u32 multiplication with mul_u32_u32(). The MiracleLinux advisories (AXSA entries) reference this CVE among affected Linux kernel series and note remediation via ker...

CVE-2023-52682

CVE-2023-52682 is a Linux kernel vulnerability affecting the f2fs file system. The issue occurs when an inode is compressed but not encrypted, where the code misses calling f2fs_wait_on_block_writeback() to wait for GCed page writeback in the IPU write path, allowing out-of-order GC and IO to cau...

CVE-2023-52675

Concretely tied to CVE-2023-52675 in the Linux kernel: the issue is twofold. (1) powerpc/imc-pmu: update_events_in_group() gained a null pointer check to prevent dereferencing NULL during event updates. (2) kasprintf() can return NULL if memory allocation fails, which could lead to a NULL pointer...

CVE-2024-35837

CVE-2024-35837 is tied to a Linux kernel issue in the mvpp2 driver where BM pool registers could persist values after a kexec boot, potentially triggering a kernel panic. The published fix requires clearing the BM pool before initialization. Connected documents (e.g., OESA-2024-2182) confirm the ...

CVE-2024-35834

Technical details for CVE-2024-35834 are not provided in the supplied documents. No specifics on affected products/versions, root cause, or fixes are present; please monitor for official updates.

CVE-2023-52673

CVE-2023-52673 — Linux kernel (drm/amd/display): A debugfs-related NULL pointer error was fixed in the AMD display code. The root cause was calling the get_subvp_en() callback without verifying its existence. The fix adds a check for the callback before invocation, preventing potential NULL deref...

CVE-2023-52667

CVE-2023-52667 affects the Linux kernel net/mlx5e code path. The vulnerability is a potential double-free in fs_any_create_groups when kcalloc() succeeds but kvzalloc() fails, because ft->g could be freed twice up the call chain. The fix implemented is to set ft->g to NULL in fs_any_create_...

CVE-2024-5050

CVE-2024-5050 affects Wangshen SecGate 3600 (up to 20240516). The vulnerability is associated with the request parameter (reqfile) in the endpoint "/?g=log_import_save" which allows manipulation leading to unrestricted file upload. This could enable a remote attacker to upload arbitrary files, as...

CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

CVE-2024-34982

The lylme_spage version v1.9.5 is vulnerable to an arbitrary file upload vulnerability in the /include/file.php component. This flaw allows an attacker to upload a crafted file, leading to arbitrary code execution on the server. To remediate this, users should update to a version later than v1.9....

CVE-2024-35830

The CVE-2024-35830 issue concerns the Linux kernel media driver tc358743. Concrete details from connected advisories show the vulnerability arises when the v4l2 async device is registered before the device is fully set up. The fix is to register the v4l2 async device only after successful setup, ...

CVE-2024-35827

CVE-2024-35827 – Linux kernel io_uring/net overflow fix : The vulnerability arises in io_recvmsg_mshot_prep() where a size_t controllen (unsigned long) is cast to int for overflow checking, allowing an overflow misinterpretation if the value becomes negative. The check_add_overflow() logic depend...