Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52667 State: PUBLISHED Published: 2024-05-17T14:01:48.454Z Last Updated: 2025-05-04T07:41:10.159Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() will free ft->g. However, its caller fs_any_create_table() will free ft->g again through calling mlx5e_destroy_flow_table(), which will lead to a double-free. Fix this by setting ft->g to NULL in fs_any_create_groups(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.ke
reate_groups(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 - https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe - https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 - https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 - https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e
CVE ID: CVE-2023-52668 State: PUBLISHED Published: 2024-05-17T14:01:52.768Z Last Updated: 2025-05-04T07:41:11.423Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix lock ordering in btrfs_zone_activate() The btrfs CI reported a lockdep warning as follows by running generic generic/129. WARNING: possible circular locking dependency detected 6.7.0-rc5+ #1 Not tainted ------------------------------------------------------ kworker/u5:5/793427 is trying to acquire lock: ffff88813256d028 (&cache->lock){+.+.}-{2:2}, at: btrfs_zone_finish_one_bg+0x5e/0x130 but task is already holding lock: ffff88810a23a318 (&fs_info->zon
){+.+.}-{2:2}, at: btrfs_zone_finish_one_bg+0x5e/0x130 but task is already holding lock: ffff88810a23a318 (&fs_info->zone_active_bgs_lock){+.+.}-{2:2}, at: btrfs_zone_finish_one_bg+0x34/0x130 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (&fs_info->zone_active_bgs_lock){+.+.}-{2:2}: ... -> #0 (&cache->lock){+.+.}-{2:2}: ... This is because we take fs_info->zone_active_bgs_lock after a block_group's lock in btrfs_zone_activate() while doing the opposite in other places. Fix the issue by expanding the fs_info->zone_active_bgs_lock's critical section and taking it before a block_group's lock. Additional Analyst Notes: - CISA ADP Vulnrichm
ve_bgs_lock's critical section and taking it before a block_group's lock. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6f74989f5909cdec9b1274641f0fa306b15bb476 - https://git.kernel.org/stable/c/1908e9d01e5395adff68d9d308a0fb15337e6272 - https://git.kernel.org/stable/c/b18f3b60b35a8c01c9a2a0f0d6424c6d73971dc3
CVE ID: CVE-2023-52669 State: PUBLISHED Published: 2024-05-17T14:01:57.025Z Last Updated: 2025-05-04T07:41:12.654Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79 - https://git.kernel.org/stable/c/a7f580
ces: - https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79 - https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285 - https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23 - https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e - https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874 - https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b
CVE ID: CVE-2023-52670 State: PUBLISHED Published: 2024-05-17T14:02:01.617Z Last Updated: 2025-05-04T07:41:13.808Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: rpmsg: virtio: Free driver_override when rpmsg_remove() Free driver_override when rpmsg_remove(), otherwise the following memory leak will occur: unreferenced object 0xffff0000d55d7080 (size 128): comm "kworker/u8:2", pid 56, jiffies 4294893188 (age 214.272s) hex dump (first 32 bytes): 72 70 6d 73 67 5f 6e 73 00 00 00 00 00 00 00 00 rpmsg_ns........ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000009c94c9c1>] __kmem_cache_alloc_node+
0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000009c94c9c1>] __kmem_cache_alloc_node+0x1f8/0x320 [<000000002300d89b>] __kmalloc_node_track_caller+0x44/0x70 [<00000000228a60c3>] kstrndup+0x4c/0x90 [<0000000077158695>] driver_set_override+0xd0/0x164 [<000000003e9c4ea5>] rpmsg_register_device_override+0x98/0x170 [<000000001c0c89a8>] rpmsg_ns_register_device+0x24/0x30 [<000000008bbf8fa2>] rpmsg_probe+0x2e0/0x3ec [<00000000e65a68df>] virtio_dev_probe+0x1c0/0x280 [<00000000443331cc>] really_probe+0xbc/0x2dc [<00000000391064b1>] __driver_probe_device+0x78/0xe0 [<00000000a41c9a5b>] driver_probe_device+0xd8/0x160 [<000000009c3bd5df>] __device_attach_driver+0xb8/0x14
vice+0x78/0xe0 [<00000000a41c9a5b>] driver_probe_device+0xd8/0x160 [<000000009c3bd5df>] __device_attach_driver+0xb8/0x140 [<0000000043cd7614>] bus_for_each_drv+0x7c/0xd4 [<000000003b929a36>] __device_attach+0x9c/0x19c [<00000000a94e0ba8>] device_initial_probe+0x14/0x20 [<000000003c999637>] bus_probe_device+0xa0/0xac Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/229ce47cbfdc7d3a9415eb676abbfb77d676cb08 - https://git.kernel.org/stable/c/dd50fe18c234bd5ff22f658f4d414e8fa8cd6a5d - https://git.kernel.org/stable/c/69ca89d80f2c8a1f5af429b955637beea7eead30 - https://git.kernel.org/stable/c/2d27a7b19cb354c6d04bcdc9239e261ff29
/stable/c/69ca89d80f2c8a1f5af429b955637beea7eead30 - https://git.kernel.org/stable/c/2d27a7b19cb354c6d04bcdc9239e261ff29858d6 - https://git.kernel.org/stable/c/f4bb1d5daf77b1a95a43277268adf0d1430c2346 - https://git.kernel.org/stable/c/4e6cef3fae5c164968118a13f3fe293700adc81a - https://git.kernel.org/stable/c/9a416d624e5fb7246ea97c11fbfea7e0e27abf43 - https://git.kernel.org/stable/c/d5362c37e1f8a40096452fc201c30e705750e687
CVE ID: CVE-2023-52671 State: PUBLISHED Published: 2024-05-17T14:02:05.992Z Last Updated: 2025-07-11T17:19:33.628Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix hang/underflow when transitioning to ODM4:1 [Why] Under some circumstances, disabling an OPTC and attempting to reclaim its OPP(s) for a different OPTC could cause a hang/underflow due to OPPs not being properly disconnected from the disabled OPTC. [How] Ensure that all OPPs are unassigned from an OPTC when it gets disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ae6
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ae62f1dde66a6f0eee98defc4c7a346bd5acd239 - https://git.kernel.org/stable/c/4b6b479b2da6badff099b2e3abf0248936eefbf5 - https://git.kernel.org/stable/c/e7b2b108cdeab76a7e7324459e50b0c1214c0386
CVE ID: CVE-2023-52672 State: PUBLISHED Published: 2024-05-17T14:02:10.308Z Last Updated: 2025-05-04T07:41:16.156Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pipe: wakeup wr_wait after setting max_usage Commit c73be61cede5 ("pipe: Add general notification queue support") a regression was introduced that would lock up resized pipes under certain conditions. See the reproducer in [1]. The commit resizing the pipe ring size was moved to a different function, doing that moved the wakeup for pipe->wr_wait before actually raising pipe->max_usage. If a pipe was full before the resize occured it would result in the wakeup never act
e actually raising pipe->max_usage. If a pipe was full before the resize occured it would result in the wakeup never actually triggering pipe_write. Set @max_usage and @nr_accounted before waking writers if this isn't a watch queue. [Christian Brauner <brauner@kernel.org>: rewrite to account for watch queues] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/162ae0e78bdabf84ef10c1293c4ed7865cb7d3c8 - https://git.kernel.org/stable/c/3efbd114b91525bb095b8ae046382197d92126b9 - https://git.kernel.org/stable/c/b87a1229d8668fbc78ebd9ca0fc797a76001c60f - https://git.kernel.org/stable/c/68e51bdb1194f11d3452525b99c98aff6f837b24 -
/c/b87a1229d8668fbc78ebd9ca0fc797a76001c60f - https://git.kernel.org/stable/c/68e51bdb1194f11d3452525b99c98aff6f837b24 - https://git.kernel.org/stable/c/6fb70694f8d1ac34e45246b0ac988f025e1e5b55 - https://git.kernel.org/stable/c/e95aada4cb93d42e25c30a0ef9eb2923d9711d4a
CVE ID: CVE-2023-52673 State: PUBLISHED Published: 2024-05-17T14:02:14.710Z Last Updated: 2025-05-21T08:49:51.125Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a debugfs null pointer error [WHY & HOW] Check whether get_subvp_en() callback exists before calling it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/43235db21fc23559f50a62f8f273002eeb506f5a - https://git.kernel.org/stable/c/efb91fea652a42fcc037d2a9ef4ecd1ffc5ff4b7
CVE ID: CVE-2023-52674 State: PUBLISHED Published: 2024-05-17T14:24:40.049Z Last Updated: 2025-05-04T07:41:18.386Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() Ensure the value passed to scarlett2_mixer_ctl_put() is between 0 and SCARLETT2_MIXER_MAX_VALUE so we don't attempt to access outside scarlett2_mixer_values[]. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e517645ead5ea22c69d2a44694baa23fe1ce7c2b - https://git.kernel.org/stable/c/d8d8897d65061cbe36bf2909057338303a904810 - https://git.ker
22c69d2a44694baa23fe1ce7c2b - https://git.kernel.org/stable/c/d8d8897d65061cbe36bf2909057338303a904810 - https://git.kernel.org/stable/c/03035872e17897ba89866940bbc9cefca601e572 - https://git.kernel.org/stable/c/ad945ea8d47dd4454c271510bea24850119847c2 - https://git.kernel.org/stable/c/04f8f053252b86c7583895c962d66747ecdc61b7
CVE ID: CVE-2023-52675 State: PUBLISHED Published: 2024-05-17T14:24:40.721Z Last Updated: 2025-05-04T07:41:19.518Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/75fc599bcdcb1de093c9ced2e3cccc832f3787f3 - https://git.kernel.org/stable/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34 - https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7
table/c/1e80aa25d186a7aa212df5acd8c75f55ac8dae34 - https://git.kernel.org/stable/c/5a669f3511d273c8c1ab1c1d268fbcdf53fc7a05 - https://git.kernel.org/stable/c/f105c263009839d80fad6998324a4e1b3511cba0 - https://git.kernel.org/stable/c/a2da3f9b1a1019c887ee1d164475a8fcdb0a3fec - https://git.kernel.org/stable/c/024352f7928b28f53609660663329d8c0f4ad032 - https://git.kernel.org/stable/c/c7d828e12b326ea50fb80c369d7aa87519ed14c6 - https://git.kernel.org/stable/c/0a233867a39078ebb0f575e2948593bbff5826b3
CVE ID: CVE-2023-52676 State: PUBLISHED Published: 2024-05-17T14:24:41.387Z Last Updated: 2025-06-19T12:56:29.560Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmetic around checking stack bounds to be done in the 64-bit domain, instead of the current 32bit. The arithmetic implies adding together a 64-bit register with a int offset. The register was checked to be below 1<<29 when it was variable, but not when it was fixed. The offset either comes from an instruction (in which case it is 16 bit), from another register (in which case the caller checked i
either comes from an instruction (in which case it is 16 bit), from another register (in which case the caller checked it to be below 1<<29 [1]), or from the size of an argument to a kfunc (in which case it can be a u32 [2]). Between the register being inconsistently checked to be below 1<<29, and the offset being up to an u32, it appears that we were open to overflowing the `int`s which were currently used for arithmetic. [1] https://github.com/torvalds/linux/blob/815fb87b753055df2d9e50f6cd80eb10235fe3e9/kernel/bpf/verifier.c#L7494-L7498 [2] https://github.com/torvalds/linux/blob/815fb87b753055df2d9e50f6cd80eb10235fe3e9/kernel/bpf/verifier.c#L11904 Additional Analyst Notes: - CISA ADP Vulnr
ux/blob/815fb87b753055df2d9e50f6cd80eb10235fe3e9/kernel/bpf/verifier.c#L11904 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ad140fc856f0b1d5e2215bcb6d0cc247a86805a2 - https://git.kernel.org/stable/c/e5ad9ecb84405637df82732ee02ad741a5f782a6 - https://git.kernel.org/stable/c/1d38a9ee81570c4bd61f557832dead4d6f816760
CVE ID: CVE-2023-52677 State: PUBLISHED Published: 2024-05-17T14:24:42.051Z Last Updated: 2025-05-04T07:41:21.945Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: riscv: Check if the code to patch lies in the exit section Otherwise we fall through to vmalloc_to_page() which panics since the address does not lie in the vmalloc region. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/938f70d14618ec72e10d6fcf8a546134136d7c13 - https://git.kernel.org/stable/c/890cfe5337e0aaf03ece1429db04d23c88da72e7 - https://git.kernel.org/stable/c/8db56df4a954b774bdc68917046a
nel.org/stable/c/890cfe5337e0aaf03ece1429db04d23c88da72e7 - https://git.kernel.org/stable/c/8db56df4a954b774bdc68917046a685a9fa2e4bc - https://git.kernel.org/stable/c/1d7a03052846f34d624d0ab41a879adf5e85c85f - https://git.kernel.org/stable/c/420370f3ae3d3b883813fd3051a38805160b2b9f
CVE ID: CVE-2023-52678 State: PUBLISHED Published: 2024-05-17T14:24:42.715Z Last Updated: 2025-05-04T07:41:23.176Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c Before using list_first_entry, make sure to check that list is not empty, if list is empty return -ENODATA. Fixes the below: drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1347 kfd_create_indirect_link_prop() warn: can 'gpu_link' even be NULL? drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1428 kfd_add_peer_prop() warn: can 'iolink1' even be NULL? drivers/gpu/drm/amd/amd
m/amd/amdgpu/../amdkfd/kfd_topology.c:1428 kfd_add_peer_prop() warn: can 'iolink1' even be NULL? drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1433 kfd_add_peer_prop() warn: can 'iolink2' even be NULL? Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4525525cb7161d08f95d0e47025323dd10214313 - https://git.kernel.org/stable/c/5024cce888e11e5688f77df81db9e14828495d64 - https://git.kernel.org/stable/c/4ac4e023ed7ab1c7c67d2d12b7b6198fcd099e5c - https://git.kernel.org/stable/c/499839eca34ad62d43025ec0b46b80e77065f6d8
CVE ID: CVE-2023-52679 State: PUBLISHED Published: 2024-05-17T14:24:43.380Z Last Updated: 2025-05-04T07:41:24.267Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop. Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur". Extend the unitte
rue in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur". Extend the unittest to detect the double free and add an additional test case that actually triggers this path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db - https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2 - https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea - https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21 - https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd - https://git.kernel.o
5a818ebbc4e6b293ffca21 - https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd - https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8 - https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7 - https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b
CVE ID: CVE-2023-52680 State: PUBLISHED Published: 2024-05-17T14:24:44.033Z Last Updated: 2025-05-04T07:41:25.509Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error checks to *_ctl_get() The *_ctl_get() functions which call scarlett2_update_*() were not checking the return value. Fix to check the return value and pass to the caller. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3a09488f4f67f7ade59b8ac62a6c7fb29439cf51 - https://git.kernel.org/stable/c/cda7762bea857e6951315a2f7d0632ea1850ed43 - https://git.kernel.org/stabl
6c7fb29439cf51 - https://git.kernel.org/stable/c/cda7762bea857e6951315a2f7d0632ea1850ed43 - https://git.kernel.org/stable/c/821fbaeaaae23d483d3df799fe91ec8045973ec3 - https://git.kernel.org/stable/c/773e38f73461ef2134a0d33a08f1668edde9b7c3 - https://git.kernel.org/stable/c/50603a67daef161c78c814580d57f7f0be57167e
CVE ID: CVE-2023-52681 State: PUBLISHED Published: 2024-05-17T14:24:44.687Z Last Updated: 2025-06-19T12:39:12.925Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: efivarfs: Free s_fs_info on unmount Now that we allocate a s_fs_info struct on fs context creation, we should ensure that we free it again when the superblock goes away. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/92be3095c6ca1cdc46237839c6087555be9160e3 - https://git.kernel.org/stable/c/547713d502f7b4b8efccd409cff84d731a23853b
CVE ID: CVE-2023-52682 State: PUBLISHED Published: 2024-05-17T14:24:45.345Z Last Updated: 2025-05-04T07:41:27.856Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writeback for post_read case If inode is compressed, but not encrypted, it missed to call f2fs_wait_on_block_writeback() to wait for GCed page writeback in IPU write path. Thread A GC-Thread - f2fs_gc - do_garbage_collect - gc_data_segment - move_data_block - f2fs_submit_page_write migrate normal cluster's block via meta_inode's page cache - f2fs_write_single_data_page - f2fs_do_write_data_page - f2fs_inplace_write_data - f2fs_submit_page_bio
de's page cache - f2fs_write_single_data_page - f2fs_do_write_data_page - f2fs_inplace_write_data - f2fs_submit_page_bio IRQ - f2fs_read_end_io IRQ old data overrides new data due to out-of-order GC and common IO. - f2fs_read_end_io Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9bfd5ea71521d0e522ba581c6ccc5db93759c0c3 - https://git.kernel.org/stable/c/4535be48780431753505e74e1b1ad4836a189bc2 - https://git.kernel.org/stable/c/f904c156d8011d8291ffd5b6b398f3747e294986 - https://git.kernel.org/stable/c/55fdc1c24a1d6229fe0ecf31335fb9a2eceaaa00
CVE ID: CVE-2023-52683 State: PUBLISHED Published: 2024-05-17T14:24:46.014Z Last Updated: 2025-05-04T07:41:29.796Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ACPI: LPIT: Avoid u32 multiplication overflow In lpit_update_residency() there is a possibility of overflow in multiplication, if tsc_khz is large enough (> UINT_MAX/1000). Change multiplication to mul_u32_u32(). Found by Linux Verification Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/647d1d50c31e60ef9ccb9756a8fdf863329f7aee - https://git.kernel.org/stable
: References: - https://git.kernel.org/stable/c/647d1d50c31e60ef9ccb9756a8fdf863329f7aee - https://git.kernel.org/stable/c/6c38e791bde07d6ca2a0a619ff9b6837e0d5f9ad - https://git.kernel.org/stable/c/f39c3d578c7d09a18ceaf56750fc7f20b02ada63 - https://git.kernel.org/stable/c/c1814a4ffd016ce5392c6767d22ef3aa2f0d4bd1 - https://git.kernel.org/stable/c/72222dfd76a79d9666ab3117fcdd44ca8cd0c4de - https://git.kernel.org/stable/c/d1ac288b2742aa4af746c5613bac71760fadd1c4 - https://git.kernel.org/stable/c/b7aab9d906e2e252a7783f872406033ec49b6dae - https://git.kernel.org/stable/c/56d2eeda87995245300836ee4dbd13b002311782
CVE ID: CVE-2023-52684 State: PUBLISHED Published: 2024-05-17T14:24:46.675Z Last Updated: 2025-05-04T07:41:31.112Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instances of returning error codes directly instead of jumping to the relevant labels where memory allocated for the SCM calls would be freed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/85fdbf6840455be64eac16bdfe0df3368ee3d0f0 - https://git.kernel.org/stable/c/6c57d7b593c4a4e60db65d5ce0fe1d9f79ccbe9b
CVE ID: CVE-2023-52685 State: REJECTED Published: 2024-05-17T14:24:47.322Z Last Updated: 2024-06-18T13:08:51.130Z Description: No description available.
CVE ID: CVE-2023-52686 State: PUBLISHED Published: 2024-05-17T14:24:47.984Z Last Updated: 2025-05-04T07:41:32.437Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_event_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8422d179cf46889c15ceff9ede48c5bfa4e7f0b4 - https://git.kernel.org/stable/c/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 - https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf - h
/e93d7cf4c1ddbcd846739e7ad849f955a4f18031 - https://git.kernel.org/stable/c/e6ad05e3ae9c84c5a71d7bb2d44dc845ae7990cf - https://git.kernel.org/stable/c/c0b111ea786ddcc8be0682612830796ece9436c7 - https://git.kernel.org/stable/c/9a523e1da6d88c2034f946adfa4f74b236c95ca9 - https://git.kernel.org/stable/c/a14c55eb461d630b836f80591d8caf1f74e62877 - https://git.kernel.org/stable/c/e08c2e275fa1874de945b87093f925997722ee42 - https://git.kernel.org/stable/c/8649829a1dd25199bbf557b2621cedb4bf9b3050