<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 07 Nov 2026 10:41:15 +0000</lastBuildDate>
    <item>
      <title>f5804159-d0d4-4304-b440-da5039d27443</title>
      <link>https://db.gcve.eu/sighting/f5804159-d0d4-4304-b440-da5039d27443/export</link>
      <description>{"uuid": "f5804159-d0d4-4304-b440-da5039d27443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-56665", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "f5804159-d0d4-4304-b440-da5039d27443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-56665", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/f5804159-d0d4-4304-b440-da5039d27443/export</guid>
      <pubDate>Thu, 19 Mar 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>13428a98-fb48-4a95-8331-f552b709bc49</title>
      <link>https://db.gcve.eu/sighting/13428a98-fb48-4a95-8331-f552b709bc49/export</link>
      <description>{"uuid": "13428a98-fb48-4a95-8331-f552b709bc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-56660", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "13428a98-fb48-4a95-8331-f552b709bc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-56660", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/13428a98-fb48-4a95-8331-f552b709bc49/export</guid>
      <pubDate>Thu, 19 Mar 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>ebc596ae-4a9e-464b-a806-e6805a41c8ab</title>
      <link>https://db.gcve.eu/sighting/ebc596ae-4a9e-464b-a806-e6805a41c8ab/export</link>
      <description>{"uuid": "ebc596ae-4a9e-464b-a806-e6805a41c8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</description>
      <content:encoded>{"uuid": "ebc596ae-4a9e-464b-a806-e6805a41c8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ebc596ae-4a9e-464b-a806-e6805a41c8ab/export</guid>
      <pubDate>Wed, 03 Dec 2025 14:14:49 +0000</pubDate>
    </item>
    <item>
      <title>b426074a-96c5-4076-b955-025779856e74</title>
      <link>https://db.gcve.eu/sighting/b426074a-96c5-4076-b955-025779856e74/export</link>
      <description>{"uuid": "b426074a-96c5-4076-b955-025779856e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</description>
      <content:encoded>{"uuid": "b426074a-96c5-4076-b955-025779856e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b426074a-96c5-4076-b955-025779856e74/export</guid>
      <pubDate>Wed, 03 Dec 2025 14:14:49 +0000</pubDate>
    </item>
    <item>
      <title>a338bf75-5f25-473b-84e1-af9b2a7d1f42</title>
      <link>https://db.gcve.eu/sighting/a338bf75-5f25-473b-84e1-af9b2a7d1f42/export</link>
      <description>{"uuid": "a338bf75-5f25-473b-84e1-af9b2a7d1f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lwhluqui2w2q", "content": "", "creation_timestamp": "2025-08-15T19:33:05.429593Z"}</description>
      <content:encoded>{"uuid": "a338bf75-5f25-473b-84e1-af9b2a7d1f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lwhluqui2w2q", "content": "", "creation_timestamp": "2025-08-15T19:33:05.429593Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a338bf75-5f25-473b-84e1-af9b2a7d1f42/export</guid>
      <pubDate>Fri, 15 Aug 2025 19:33:05 +0000</pubDate>
    </item>
    <item>
      <title>0188c390-0624-4905-a213-33d65ed2e962</title>
      <link>https://db.gcve.eu/sighting/0188c390-0624-4905-a213-33d65ed2e962/export</link>
      <description>{"uuid": "0188c390-0624-4905-a213-33d65ed2e962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "0188c390-0624-4905-a213-33d65ed2e962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/0188c390-0624-4905-a213-33d65ed2e962/export</guid>
      <pubDate>Thu, 14 Aug 2025 10:00:00 +0000</pubDate>
    </item>
    <item>
      <title>8a641d0f-e3fb-481d-8a39-d51b75629856</title>
      <link>https://db.gcve.eu/sighting/8a641d0f-e3fb-481d-8a39-d51b75629856/export</link>
      <description>{"uuid": "8a641d0f-e3fb-481d-8a39-d51b75629856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56661", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "8a641d0f-e3fb-481d-8a39-d51b75629856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56661", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/8a641d0f-e3fb-481d-8a39-d51b75629856/export</guid>
      <pubDate>Thu, 14 Aug 2025 10:00:00 +0000</pubDate>
    </item>
    <item>
      <title>2ef6aa02-d253-47f8-9346-a98d0e1ed581</title>
      <link>https://db.gcve.eu/sighting/2ef6aa02-d253-47f8-9346-a98d0e1ed581/export</link>
      <description>{"uuid": "2ef6aa02-d253-47f8-9346-a98d0e1ed581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvlahnw5xk2i", "content": "", "creation_timestamp": "2025-08-04T12:54:24.228647Z"}</description>
      <content:encoded>{"uuid": "2ef6aa02-d253-47f8-9346-a98d0e1ed581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56664", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lvlahnw5xk2i", "content": "", "creation_timestamp": "2025-08-04T12:54:24.228647Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2ef6aa02-d253-47f8-9346-a98d0e1ed581/export</guid>
      <pubDate>Mon, 04 Aug 2025 12:54:24 +0000</pubDate>
    </item>
    <item>
      <title>61fdfd24-b2ea-4625-b30c-0b26fe7033f8</title>
      <link>https://db.gcve.eu/sighting/61fdfd24-b2ea-4625-b30c-0b26fe7033f8/export</link>
      <description>{"uuid": "61fdfd24-b2ea-4625-b30c-0b26fe7033f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56663", "type": "seen", "source": "https://t.me/cvedetector/13776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56663 - \"WiFi: Linux Kernel NL80211 Attr Validation Off-By-One Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-56663 \nPublished : Dec. 27, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one  \n  \nSince the netlink attribute range validation provides inclusive  \nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be  \nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.  \n  \nOne crash stack for demonstration:  \n==================================================================  \nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939  \nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508  \n  \nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106  \n print_report+0xe0/0x750 mm/kasan/report.c:398  \n kasan_report+0x139/0x170 mm/kasan/report.c:495  \n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189  \n memcpy+0x25/0x60 mm/kasan/shadow.c:65  \n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939  \n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]  \n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453  \n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756  \n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]  \n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850  \n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508  \n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861  \n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]  \n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352  \n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874  \n sock_sendmsg_nosec net/socket.c:716 [inline]  \n __sock_sendmsg net/socket.c:728 [inline]  \n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499  \n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553  \n __sys_sendmsg net/socket.c:2582 [inline]  \n __do_sys_sendmsg net/socket.c:2591 [inline]  \n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589  \n do_syscall_x64 arch/x86/entry/common.c:51 [inline]  \n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81  \n entry_SYSCALL_64_after_hwframe+0x63/0xcd  \n  \nUpdate the policy to ensure correct validation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T16:51:11.000000Z"}</description>
      <content:encoded>{"uuid": "61fdfd24-b2ea-4625-b30c-0b26fe7033f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56663", "type": "seen", "source": "https://t.me/cvedetector/13776", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56663 - \"WiFi: Linux Kernel NL80211 Attr Validation Off-By-One Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-56663 \nPublished : Dec. 27, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one  \n  \nSince the netlink attribute range validation provides inclusive  \nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be  \nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.  \n  \nOne crash stack for demonstration:  \n==================================================================  \nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939  \nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508  \n  \nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106  \n print_report+0xe0/0x750 mm/kasan/report.c:398  \n kasan_report+0x139/0x170 mm/kasan/report.c:495  \n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189  \n memcpy+0x25/0x60 mm/kasan/shadow.c:65  \n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939  \n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]  \n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453  \n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756  \n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]  \n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850  \n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508  \n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861  \n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]  \n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352  \n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874  \n sock_sendmsg_nosec net/socket.c:716 [inline]  \n __sock_sendmsg net/socket.c:728 [inline]  \n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499  \n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553  \n __sys_sendmsg net/socket.c:2582 [inline]  \n __do_sys_sendmsg net/socket.c:2591 [inline]  \n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589  \n do_syscall_x64 arch/x86/entry/common.c:51 [inline]  \n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81  \n entry_SYSCALL_64_after_hwframe+0x63/0xcd  \n  \nUpdate the policy to ensure correct validation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T16:51:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/61fdfd24-b2ea-4625-b30c-0b26fe7033f8/export</guid>
      <pubDate>Fri, 27 Dec 2024 16:51:11 +0000</pubDate>
    </item>
    <item>
      <title>a1379243-9838-48e0-a072-f46d68df0d13</title>
      <link>https://db.gcve.eu/sighting/a1379243-9838-48e0-a072-f46d68df0d13/export</link>
      <description>{"uuid": "a1379243-9838-48e0-a072-f46d68df0d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://t.me/cvedetector/13775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56662 - Linux ACPI Nfit Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56662 \nPublished : Dec. 27, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl  \n  \nFix an issue detected by syzbot with KASAN:  \n  \nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/  \ncore.c:416 [inline]  \nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0  \ndrivers/acpi/nfit/core.c:459  \n  \nThe issue occurs in cmd_to_func when the call_pkg-&amp;gt;nd_reserved2  \narray is accessed without verifying that call_pkg points to a buffer  \nthat is appropriately sized as a struct nd_cmd_pkg. This can lead  \nto out-of-bounds access and undefined behavior if the buffer does not  \nhave sufficient space.  \n  \nTo address this, a check was added in acpi_nfit_ctl() to ensure that  \nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)  \nbefore accessing it. This ensures safe access to the members of  \ncall_pkg, including the nd_reserved2 array. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T16:51:07.000000Z"}</description>
      <content:encoded>{"uuid": "a1379243-9838-48e0-a072-f46d68df0d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-56662", "type": "seen", "source": "https://t.me/cvedetector/13775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56662 - Linux ACPI Nfit Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-56662 \nPublished : Dec. 27, 2024, 3:15 p.m. | 32\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl  \n  \nFix an issue detected by syzbot with KASAN:  \n  \nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/  \ncore.c:416 [inline]  \nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0  \ndrivers/acpi/nfit/core.c:459  \n  \nThe issue occurs in cmd_to_func when the call_pkg-&amp;gt;nd_reserved2  \narray is accessed without verifying that call_pkg points to a buffer  \nthat is appropriately sized as a struct nd_cmd_pkg. This can lead  \nto out-of-bounds access and undefined behavior if the buffer does not  \nhave sufficient space.  \n  \nTo address this, a check was added in acpi_nfit_ctl() to ensure that  \nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)  \nbefore accessing it. This ensures safe access to the members of  \ncall_pkg, including the nd_reserved2 array. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T16:51:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a1379243-9838-48e0-a072-f46d68df0d13/export</guid>
      <pubDate>Fri, 27 Dec 2024 16:51:07 +0000</pubDate>
    </item>
  </channel>
</rss>
