Dongliang Mu

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A potential NULL pointer dereference issue has been identified in the Linux kernel. The problem occurs when the `sd probe()` function encounters an early error before the `sdkp->device` is initialized, leading to the `sd zbc release disk()` function being called. This results in a NULL pointer dereference when `sd is zoned()` is called within that function. The issue is resolved by removing the call to `sd zbc release disk()` in the `sd probe()` error path. This change does not cause zone information memory leakage because the zone information for a zoned disk is allocated only when `sd revalidate disk()` is called. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver, allowing a local user to crash or potentially escalate their privileges on the system. The issue is located in the `bigben probe` function of `drivers/hid/hid-bigbenff.c` and is caused by an incorrect assumption that all bigben devices have inputs, which can be broken by malicious devices, leading to an out-of-bounds write. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.16.11 **Description** The issue is related to a memory leak in the Linux kernel, specifically in the drivers/hid/hid-elo.c component. This memory leak occurs under certain error conditions related to hid parse. Exploitation of this issue could allow an attacker to cause a denial of service. **Recommendations** For Linux kernel versions prior to 5.16.11, update to version 5.16.11 or later to resolve the memory leak issue. As a temporary workaround, consider restricting access to the vulnerable `hid-elo.c` driver to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a possible use-after-free in the `smsc75xx bind` function. The commit `46a8b29c6306` ("net: usb: fix memory leak in `smsc75xx bind`") fails to clean up the work scheduled in `smsc75xx reset`->`smsc75xx set multicast`, which leads to use-after-free if the work is scheduled to start after the deallocation. In addition, this patch also removes a dangling pointer - `dev->data[0]`. The patch calls `cancel work sync` to cancel the scheduled work and set the dangling pointer to NULL. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Netwide Assembler (NASM) version 2.14rc0 Description: The issue is caused by an integer overflow in the globallineno variable, resulting in an endless while loop in the assemble file function of asm/nasm.c. Recommendations: For Netwide Assembler (NASM) version 2.14rc0, consider applying a patch to fix the integer overflow issue in the globallineno variable to prevent the endless while loop in the assemble file function.

**Name of the Vulnerable Software and Affected Versions** libxml2 version 2.9.8 **Description** The issue is related to the xz decomp function in libxml2, which can be exploited by remote attackers to cause a denial of service (infinite loop) via a crafted XML file, triggering LZMA MEMLIMIT ERROR. This can be demonstrated using xmllint. **Recommendations** For libxml2 version 2.9.8, consider disabling the `xz decomp` function as a temporary workaround until a patch is available. Restrict access to crafted XML files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils versions 2.29 through 2.30 **Description** An issue in the C++ demangling functions provided by libiberty, specifically in the cplus-dem.c file, leads to stack exhaustion due to recursive stack frames in functions such as `demangle nested args`, `demangle args`, `do arg`, and `do type`. This can potentially allow an attacker to cause a denial of service. **Recommendations** For GNU Binutils versions 2.29 and 2.30, consider disabling the C++ demangling functions provided by libiberty as a temporary workaround until a patch is available. Restrict access to the vulnerable functions `demangle nested args`, `demangle args`, `do arg`, and `do type` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.