diff --git a/vulns/CVE-2023-52924.yml b/vulns/CVE-2023-52924.yml new file mode 100644 index 0000000..2936de0 --- /dev/null +++ b/vulns/CVE-2023-52924.yml @@ -0,0 +1,7 @@ +reachability: Local +memory_corruption: False +bug_class: Logical Error +impact: DoS +privileges_required: Low +notes: inconsistency in handling expired elements during nftables set walks, leading to incorrect reference counting. +author: Microsoft diff --git a/vulns/CVE-2023-52925.yml b/vulns/CVE-2023-52925.yml new file mode 100644 index 0000000..0af1dac --- /dev/null +++ b/vulns/CVE-2023-52925.yml @@ -0,0 +1,7 @@ +reachability: Local +memory_corruption: False +bug_class: Logical Error +impact: DoS +privileges_required: Low +notes: incorrect handling of expired elements in nftables, leading to unexpected failures in insertion operations. +author: Microsoft diff --git a/vulns/CVE-2025-21671.yml b/vulns/CVE-2025-21671.yml new file mode 100644 index 0000000..1e854e9 --- /dev/null +++ b/vulns/CVE-2025-21671.yml @@ -0,0 +1,7 @@ +reachability: Local +memory_corruption: True +bug_class: Use-After-Free +impact: Kernel Panic +privileges_required: Low +notes: `zram_meta_free` may access the freed table, leading to a use-after-free vulnerability causing kernel panic. +author: Microsoft diff --git a/vulns/CVE-2025-21672.yml b/vulns/CVE-2025-21672.yml new file mode 100644 index 0000000..f622b31 --- /dev/null +++ b/vulns/CVE-2025-21672.yml @@ -0,0 +1,7 @@ +reachability: Local +memory_corruption: False +bug_class: Logical Error +impact: Deadlock +privileges_required: Low +notes: merge preference rule failure, leading to a missing lock(inode lock) release. +author: Micrsoft diff --git a/vulns/CVE-2025-21673.yml b/vulns/CVE-2025-21673.yml new file mode 100644 index 0000000..2c83935 --- /dev/null +++ b/vulns/CVE-2025-21673.yml @@ -0,0 +1,7 @@ +reachability: Local +memory_corruption: True +bug_class: Use-After-Free +impact: Kernel Panic +privileges_required: Low +notes: `server->hostname` is freed while a background CIFS daemon thread is still using it, leading to a double-free scenario. +author: Microsoft