Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-49250 State: PUBLISHED Published: 2025-02-26T01:56:07.719Z Last Updated: 2025-05-04T08:33:21.563Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in comp_enabled[] array. References: - https://git.kernel.org/stable/c/9208ecc703b5ed5b12d7ea13c79207f4c8456638 - https://git.kernel.org/stable/c/87a2b44cb3005d30c3a72234d1e47b03ae3bb29a - https://git.kernel.org/stable/c/6aa8ef9535dbd561293406608ebe791627b10196 -
/c/87a2b44cb3005d30c3a72234d1e47b03ae3bb29a - https://git.kernel.org/stable/c/6aa8ef9535dbd561293406608ebe791627b10196 - https://git.kernel.org/stable/c/42c709c4e1ce4c136891530646c9abd5dff3524f
CVE ID: CVE-2022-49251 State: PUBLISHED Published: 2025-02-26T01:56:08.180Z Last Updated: 2025-05-04T08:33:22.619Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: va-macro: fix accessing array out of bounds for enum type Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeof(long) is 8 compared to enum size which is 4 bytes. References: - https://git.kernel.org/stable/c/966408e37d84b762d11978b7bfb03fff0c6222ad - https://git.kernel.org/stable/c/4a799972a283ab4ec031041304d7e2d34e1a16eb - https://git.kernel.org/stable/c/c0099bbf8bc85d30c4cf38220fca3c8d4253fa7f -
/c/4a799972a283ab4ec031041304d7e2d34e1a16eb - https://git.kernel.org/stable/c/c0099bbf8bc85d30c4cf38220fca3c8d4253fa7f - https://git.kernel.org/stable/c/0ea5eff7c6063a8f124188424f8e4c6727f35051
CVE ID: CVE-2022-49252 State: PUBLISHED Published: 2025-02-26T01:56:08.663Z Last Updated: 2025-05-04T08:33:24.889Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing array out of bounds for enum type Accessing enums using integer would result in array out of bounds access on platforms like aarch64 where sizeof(long) is 8 compared to enum size which is 4 bytes. References: - https://git.kernel.org/stable/c/eb15c6ea692fd88d70698d874d9a0d667fb4cde9 - https://git.kernel.org/stable/c/7e3629e256d1cabf801d00050550ade4d036cafe - https://git.kernel.org/stable/c/aed43e92e4b9187029903880d5db608f7fa1c53c -
/c/7e3629e256d1cabf801d00050550ade4d036cafe - https://git.kernel.org/stable/c/aed43e92e4b9187029903880d5db608f7fa1c53c - https://git.kernel.org/stable/c/bcfe5f76cc4051ea3f9eb5d2c8ea621641f290a5
CVE ID: CVE-2022-49253 State: PUBLISHED Published: 2025-02-26T01:56:09.146Z Last Updated: 2025-05-04T08:33:26.109Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: usb: go7007: s2250-board: fix leak in probe() Call i2c_unregister_device(audio) on this error path. References: - https://git.kernel.org/stable/c/bbdd0e15738336e6b1208304ae98525117877bbd - https://git.kernel.org/stable/c/a97130cd5b0c00eec169b10a16d922b9ea67324a - https://git.kernel.org/stable/c/b7dd177225355da55f8d80d8e568928e0eec3608 - https://git.kernel.org/stable/c/14cd5a8e61c654828a1f1056d56f0b0a524d2c69 - https://git.kernel.org/stable/c/44973633b0064c460838
/git.kernel.org/stable/c/14cd5a8e61c654828a1f1056d56f0b0a524d2c69 - https://git.kernel.org/stable/c/44973633b0064c46083833b55dd0a45e6235f8ca - https://git.kernel.org/stable/c/895364fa97e60749855f789bc4568883fc7a8b39 - https://git.kernel.org/stable/c/b5470f3efa530b10296257bb578ce4b1769e9a04 - https://git.kernel.org/stable/c/948ad5e5624487079c24cb5c81c74ddd02832440 - https://git.kernel.org/stable/c/67e4550ecd6164bfbdff54c169e5bbf9ccfaf14d
CVE ID: CVE-2022-49254 State: PUBLISHED Published: 2025-02-26T01:56:09.619Z Last Updated: 2025-05-04T08:33:27.253Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: ti-vpe: cal: Fix a NULL pointer dereference in cal_ctx_v4l2_init_formats() In cal_ctx_v4l2_init_formats(), devm_kzalloc() is assigned to ctx->active_fmt and there is a dereference of it after that, which could lead to NULL pointer dereference on failure of devm_kzalloc(). Fix this bug by adding a NULL check of ctx->active_fmt. This bug was found by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns ab
d by a static analyzer. Builds with 'make allyesconfig' show no new warnings, and our static analyzer no longer warns about this code. References: - https://git.kernel.org/stable/c/aa613ac270292e102503e9767882e39200efe608 - https://git.kernel.org/stable/c/91e2805579ab0783eed53acc2bf9fb553e939004 - https://git.kernel.org/stable/c/1381f1a629a090c251965edb56f849ad648414a4 - https://git.kernel.org/stable/c/abd77889851d2ead0d0c9c4d29f1808801477b00
CVE ID: CVE-2022-49255 State: PUBLISHED Published: 2025-02-26T01:56:10.085Z Last Updated: 2025-05-04T08:33:28.663Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing free nid in f2fs_handle_failed_inode This patch fixes xfstests/generic/475 failure. [ 293.680694] F2FS-fs (dm-1): May loss orphan inode, run fsck to fix. [ 293.685358] Buffer I/O error on dev dm-1, logical block 8388592, async page read [ 293.691527] Buffer I/O error on dev dm-1, logical block 8388592, async page read [ 293.691764] sh (7615): drop_caches: 3 [ 293.691819] sh (7616): drop_caches: 3 [ 293.694017] Buffer I/O error on dev dm-1, logical blo
h (7615): drop_caches: 3 [ 293.691819] sh (7616): drop_caches: 3 [ 293.694017] Buffer I/O error on dev dm-1, logical block 1, async page read [ 293.695659] sh (7618): drop_caches: 3 [ 293.696979] sh (7617): drop_caches: 3 [ 293.700290] sh (7623): drop_caches: 3 [ 293.708621] sh (7626): drop_caches: 3 [ 293.711386] sh (7628): drop_caches: 3 [ 293.711825] sh (7627): drop_caches: 3 [ 293.716738] sh (7630): drop_caches: 3 [ 293.719613] sh (7632): drop_caches: 3 [ 293.720971] sh (7633): drop_caches: 3 [ 293.727741] sh (7634): drop_caches: 3 [ 293.730783] sh (7636): drop_caches: 3 [ 293.732681] sh (7635): drop_caches: 3 [ 293.732988] sh (7637): drop_caches: 3 [ 293.738836] sh (7639): drop_caches:
3 [ 293.732681] sh (7635): drop_caches: 3 [ 293.732988] sh (7637): drop_caches: 3 [ 293.738836] sh (7639): drop_caches: 3 [ 293.740568] sh (7641): drop_caches: 3 [ 293.743053] sh (7640): drop_caches: 3 [ 293.821889] ------------[ cut here ]------------ [ 293.824654] kernel BUG at fs/f2fs/node.c:3334! [ 293.826226] invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 293.828713] CPU: 0 PID: 7653 Comm: umount Tainted: G OE 5.17.0-rc1-custom #1 [ 293.830946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [ 293.832526] RIP: 0010:f2fs_destroy_node_manager+0x33f/0x350 [f2fs] [ 293.833905] Code: e8 d6 3d f9 f9 48 8b 45 d0 65 48 2b 04 25 28 00 00 00 75 1a 48 81 c4 28 03 00 00
+0x33f/0x350 [f2fs] [ 293.833905] Code: e8 d6 3d f9 f9 48 8b 45 d0 65 48 2b 04 25 28 00 00 00 75 1a 48 81 c4 28 03 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b [ 293.837783] RSP: 0018:ffffb04ec31e7a20 EFLAGS: 00010202 [ 293.839062] RAX: 0000000000000001 RBX: ffff9df947db2eb8 RCX: 0000000080aa0072 [ 293.840666] RDX: 0000000000000000 RSI: ffffe86c0432a140 RDI: ffffffffc0b72a21 [ 293.842261] RBP: ffffb04ec31e7d70 R08: ffff9df94ca85780 R09: 0000000080aa0072 [ 293.843909] R10: ffff9df94ca85700 R11: ffff9df94e1ccf58 R12: ffff9df947db2e00 [ 293.845594] R13: ffff9df947db2ed0 R14: ffff9df947db2eb8 R15: ffff9df947db2eb8 [ 293.847855] FS: 00007f5a97379800(0000) GS:ffff9dfa77c00000(0000) knlGS:000000000
fff9df947db2eb8 R15: ffff9df947db2eb8 [ 293.847855] FS: 00007f5a97379800(0000) GS:ffff9dfa77c00000(0000) knlGS:0000000000000000 [ 293.850647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.852940] CR2: 00007f5a97528730 CR3: 000000010bc76005 CR4: 0000000000370ef0 [ 293.854680] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.856423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.858380] Call Trace: [ 293.859302] <TASK> [ 293.860311] ? ttwu_do_wakeup+0x1c/0x170 [ 293.861800] ? ttwu_do_activate+0x6d/0xb0 [ 293.863057] ? _raw_spin_unlock_irqrestore+0x29/0x40 [ 293.864411] ? try_to_wake_up+0x9d/0x5e0 [ 293.865618] ? debug_smp_processor_id+0x
raw_spin_unlock_irqrestore+0x29/0x40 [ 293.864411] ? try_to_wake_up+0x9d/0x5e0 [ 293.865618] ? debug_smp_processor_id+0x17/0x20 [ 293.866934] ? debug_smp_processor_id+0x17/0x20 [ 293.868223] ? free_unref_page+0xbf/0x120 [ 293.869470] ? __free_slab+0xcb/0x1c0 [ 293.870614] ? preempt_count_add+0x7a/0xc0 [ 293.871811] ? __slab_free+0xa0/0x2d0 [ 293.872918] ? __wake_up_common_lock+0x8a/0xc0 [ 293.874186] ? __slab_free+0xa0/0x2d0 [ 293.875305] ? free_inode_nonrcu+0x20/0x20 [ 293.876466] ? free_inode_nonrcu+0x20/0x20 [ 293.877650] ? debug_smp_processor_id+0x17/0x20 [ 293.878949] ? call_rcu+0x11a/0x240 [ 293.880060] ? f2fs_destroy_stats+0x59/0x60 [f2fs] [ 293.881437] ? kfree+0x1fe/0x230 [ 293.88267
? call_rcu+0x11a/0x240 [ 293.880060] ? f2fs_destroy_stats+0x59/0x60 [f2fs] [ 293.881437] ? kfree+0x1fe/0x230 [ 293.882674] f2fs_put_super+0x160/0x390 [f2fs] [ 293.883978] generic_shutdown_super+0x7a/0x120 [ 293.885274] kill_block_super+0x27/0x50 [ 293.886496] kill_f2fs_super+0x7f/0x100 [f2fs] [ 293.887806] deactivate_locked_super+0x35/0xa0 [ 293.889271] deactivate_super+0x40/0x50 [ 293.890513] cleanup_mnt+0x139/0x190 [ 293.891689] __cleanup_mnt+0x12/0x20 [ 293.892850] task_work_run+0x64/0xa0 [ 293.894035] exit_to_user_mode_prepare+0x1b7/ ---truncated--- References: - https://git.kernel.org/stable/c/005f9cdab70c915702254c5eb67a8efced80e821 - https://git.kernel.org/stable/c/1a11a873749c6375bb6
//git.kernel.org/stable/c/005f9cdab70c915702254c5eb67a8efced80e821 - https://git.kernel.org/stable/c/1a11a873749c6375bb668953fa1a196d8538d26b - https://git.kernel.org/stable/c/d1eaaf6cadedf638e17017b0a04d56308405ac10 - https://git.kernel.org/stable/c/aa80bf73e3b3fb7026d343c77b3ddc849e26a095 - https://git.kernel.org/stable/c/8579b413af100ec5f3592bd6cf11559312b380c0 - https://git.kernel.org/stable/c/2fef99b8372c1ae3d8445ab570e888b5a358dbe9
CVE ID: CVE-2022-49256 State: PUBLISHED Published: 2025-02-26T01:56:10.599Z Last Updated: 2025-05-04T08:33:29.888Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: watch_queue: Actually free the watch free_watch() does everything barring actually freeing the watch object. Fix this by adding the missing kfree. kmemleak produces a report something like the following. Note that as an address can be seen in the first word, the watch would appear to have gone through call_rcu(). BUG: memory leak unreferenced object 0xffff88810ce4a200 (size 96): comm "syz-executor352", pid 3605, jiffies 4294947473 (age 13.720s) hex dump (first 32 bytes
xffff88810ce4a200 (size 96): comm "syz-executor352", pid 3605, jiffies 4294947473 (age 13.720s) hex dump (first 32 bytes): e0 82 48 0d 81 88 ff ff 00 00 00 00 00 00 00 00 ..H............. 80 a2 e4 0c 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff8214e6cc>] kmalloc include/linux/slab.h:581 [inline] [<ffffffff8214e6cc>] kzalloc include/linux/slab.h:714 [inline] [<ffffffff8214e6cc>] keyctl_watch_key+0xec/0x2e0 security/keys/keyctl.c:1800 [<ffffffff8214ec84>] __do_sys_keyctl+0x3c4/0x490 security/keys/keyctl.c:2016 [<ffffffff84493a25>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff84493a25>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84
arch/x86/entry/common.c:50 [inline] [<ffffffff84493a25>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff84600068>] entry_SYSCALL_64_after_hwframe+0x44/0xae References: - https://git.kernel.org/stable/c/9d92be1a09fbb3dd65600dbfe7eedb40e7228e4b - https://git.kernel.org/stable/c/f69aecb49968e14196366bbe896eab0a904229f5 - https://git.kernel.org/stable/c/7e8c9b0df07a77f0d072603b8ced2677e30e1893 - https://git.kernel.org/stable/c/31824613a42aacdcbeb325bf07a1c8247a11ebe2 - https://git.kernel.org/stable/c/3d8dcf278b1ee1eff1e90be848fa2237db4c07a7
CVE ID: CVE-2022-49257 State: PUBLISHED Published: 2025-02-26T01:56:11.072Z Last Updated: 2025-05-04T08:33:31.060Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix NULL dereference in error cleanup In watch_queue_set_size(), the error cleanup code doesn't take account of the fact that __free_page() can't handle a NULL pointer when trying to free up buffer pages that did get allocated. Fix this by only calling __free_page() on the pages actually allocated. Without the fix, this can lead to something like the following: BUG: KASAN: null-ptr-deref in __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473 Read of size 4 at add
ing like the following: BUG: KASAN: null-ptr-deref in __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473 Read of size 4 at addr 0000000000000034 by task syz-executor168/3599 ... Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 __kasan_report mm/kasan/report.c:446 [inline] kasan_report.cold+0x66/0xdf mm/kasan/report.c:459 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] page_ref_count include/linux/page_ref.h:67 [inline] put_page_testzero include/linux/mm.h
omic-instrumented.h:27 [inline] page_ref_count include/linux/page_ref.h:67 [inline] put_page_testzero include/linux/mm.h:717 [inline] __free_pages+0x1f/0x1b0 mm/page_alloc.c:5473 watch_queue_set_size+0x499/0x630 kernel/watch_queue.c:275 pipe_ioctl+0xac/0x2b0 fs/pipe.c:632 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae References: - https://git.kernel.org/stable/c/5ae75b4ed30322b42abaa75ef1b784addfdb7dc9 - https://git.kernel.org/stable/c/695c47cea
: - https://git.kernel.org/stable/c/5ae75b4ed30322b42abaa75ef1b784addfdb7dc9 - https://git.kernel.org/stable/c/695c47cea02b9101e2fc2e7d36d552128592b347 - https://git.kernel.org/stable/c/112a2f9b0a8457794095a0450598f150724ec456 - https://git.kernel.org/stable/c/b6f5ad3e45d19f9c4ee3e8a2aff829f28d68591d - https://git.kernel.org/stable/c/a635415a064e77bcfbf43da413fd9dfe0bbed9cb
CVE ID: CVE-2022-49258 State: PUBLISHED Published: 2025-02-26T01:56:11.561Z Last Updated: 2025-05-04T08:33:32.476Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - Fix use after free in cc_cipher_exit() kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But ctx_p->user.key is still used in the next line, which will lead to a use after free. We can call kfree_sensitive() after dev_dbg() to avoid the uaf. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c93017c8d5ebf55a4e453ac7c84cc84cf92ab570 - https://git.kernel.org/stable/c/335bf1fc74f775a8255257aa3e337
el.org/stable/c/c93017c8d5ebf55a4e453ac7c84cc84cf92ab570 - https://git.kernel.org/stable/c/335bf1fc74f775a8255257aa3e33763f2257b676 - https://git.kernel.org/stable/c/25c358efee5153dfd240d4e0d3169d5bebe9cacd - https://git.kernel.org/stable/c/cffb5382bd8d3cf21b874ab5b84bf7618932286b - https://git.kernel.org/stable/c/3d950c34074ed74d2713c3856ba01264523289e6
CVE ID: CVE-2022-49259 State: PUBLISHED Published: 2025-02-26T01:56:12.046Z Last Updated: 2025-05-04T08:33:33.875Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: block: don't delete queue kobject before its children kobjects aren't supposed to be deleted before their child kobjects are deleted. Apparently this is usually benign; however, a WARN will be triggered if one of the child kobjects has a named attribute group: sysfs group 'modes' not found for kobject 'crypto' WARNING: CPU: 0 PID: 1 at fs/sysfs/group.c:278 sysfs_remove_group+0x72/0x80 ... Call Trace: sysfs_remove_groups+0x29/0x40 fs/sysfs/group.c:312 __kobject_del+0x20
c:278 sysfs_remove_group+0x72/0x80 ... Call Trace: sysfs_remove_groups+0x29/0x40 fs/sysfs/group.c:312 __kobject_del+0x20/0x80 lib/kobject.c:611 kobject_cleanup+0xa4/0x140 lib/kobject.c:696 kobject_release lib/kobject.c:736 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x53/0x70 lib/kobject.c:753 blk_crypto_sysfs_unregister+0x10/0x20 block/blk-crypto-sysfs.c:159 blk_unregister_queue+0xb0/0x110 block/blk-sysfs.c:962 del_gendisk+0x117/0x250 block/genhd.c:610 Fix this by moving the kobject_del() and the corresponding kobject_uevent() to the correct place. References: - https://git.kernel.org/stable/c/b2001eb10f59363da930cdd6e086a2861986fa18 - https://git.kernel.org/stable/c/84fe
ences: - https://git.kernel.org/stable/c/b2001eb10f59363da930cdd6e086a2861986fa18 - https://git.kernel.org/stable/c/84fe3ca6e7910beb47ec13509d484f84fa2a41ad - https://git.kernel.org/stable/c/0b5924a14d64487ebd51127b0358d06066ef5384 - https://git.kernel.org/stable/c/efaa0e969261e97c1fdd8e0338e5dd3ba5b9219c - https://git.kernel.org/stable/c/cf0cb8686e55d9c022944bc6ba9e19e832889e83 - https://git.kernel.org/stable/c/3d7e32c8da45957326f56937e0471c686d1a7711 - https://git.kernel.org/stable/c/0f69288253e9fc7c495047720e523b9f1aba5712
CVE ID: CVE-2022-49260 State: PUBLISHED Published: 2025-02-26T01:56:12.548Z Last Updated: 2025-05-04T08:33:34.942Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - fix the aead software fallback for engine Due to the subreq pointer misuse the private context memory. The aead soft crypto occasionally casues the OS panic as setting the 64K page. Here is fix it. References: - https://git.kernel.org/stable/c/40dba7c26e897c637e91312b35f664f1d4d0073c - https://git.kernel.org/stable/c/ef7b10f3cac7810ddcfd976304fd125aca33d144 - https://git.kernel.org/stable/c/5c1149e2abe0b7489300736b8277b45b113de67f - https://git.
c7810ddcfd976304fd125aca33d144 - https://git.kernel.org/stable/c/5c1149e2abe0b7489300736b8277b45b113de67f - https://git.kernel.org/stable/c/0a2a464f863187f97e96ebc6384c052cafd4a54c
CVE ID: CVE-2022-49261 State: PUBLISHED Published: 2025-02-26T01:56:13.077Z Last Updated: 2025-05-04T08:33:36.170Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: add missing boundary check in vm_access A missing bounds check in vm_access() can lead to an out-of-bounds read or write in the adjacent memory area, since the len attribute is not validated before the memcpy later in the function, potentially hitting: [ 183.637831] BUG: unable to handle page fault for address: ffffc90000c86000 [ 183.637934] #PF: supervisor read access in kernel mode [ 183.637997] #PF: error_code(0x0000) - not-present page [ 183.638059] P
934] #PF: supervisor read access in kernel mode [ 183.637997] #PF: error_code(0x0000) - not-present page [ 183.638059] PGD 100000067 P4D 100000067 PUD 100258067 PMD 106341067 PTE 0 [ 183.638144] Oops: 0000 [#2] PREEMPT SMP NOPTI [ 183.638201] CPU: 3 PID: 1790 Comm: poc Tainted: G D 5.17.0-rc6-ci-drm-11296+ #1 [ 183.638298] Hardware name: Intel Corporation CoffeeLake Client Platform/CoffeeLake H DDR4 RVP, BIOS CNLSFWR1.R00.X208.B00.1905301319 05/30/2019 [ 183.638430] RIP: 0010:memcpy_erms+0x6/0x10 [ 183.640213] RSP: 0018:ffffc90001763d48 EFLAGS: 00010246 [ 183.641117] RAX: ffff888109c14000 RBX: ffff888111bece40 RCX: 0000000000000ffc [ 183.642029] RDX: 0000000000001000 RSI: ffffc90000c86000 RD
fff888109c14000 RBX: ffff888111bece40 RCX: 0000000000000ffc [ 183.642029] RDX: 0000000000001000 RSI: ffffc90000c86000 RDI: ffff888109c14004 [ 183.642946] RBP: 0000000000000ffc R08: 800000000000016b R09: 0000000000000000 [ 183.643848] R10: ffffc90000c85000 R11: 0000000000000048 R12: 0000000000001000 [ 183.644742] R13: ffff888111bed190 R14: ffff888109c14000 R15: 0000000000001000 [ 183.645653] FS: 00007fe5ef807540(0000) GS:ffff88845b380000(0000) knlGS:0000000000000000 [ 183.646570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.647481] CR2: ffffc90000c86000 CR3: 000000010ff02006 CR4: 00000000003706e0 [ 183.648384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.6
010ff02006 CR4: 00000000003706e0 [ 183.648384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.649271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.650142] Call Trace: [ 183.650988] <TASK> [ 183.651793] vm_access+0x1f0/0x2a0 [i915] [ 183.652726] __access_remote_vm+0x224/0x380 [ 183.653561] mem_rw.isra.0+0xf9/0x190 [ 183.654402] vfs_read+0x9d/0x1b0 [ 183.655238] ksys_read+0x63/0xe0 [ 183.656065] do_syscall_64+0x38/0xc0 [ 183.656882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.657663] RIP: 0033:0x7fe5ef725142 [ 183.659351] RSP: 002b:00007ffe1e81c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.660227] RAX: ffffffffffffffda RBX: 0000557
RSP: 002b:00007ffe1e81c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.660227] RAX: ffffffffffffffda RBX: 0000557055dfb780 RCX: 00007fe5ef725142 [ 183.661104] RDX: 0000000000001000 RSI: 00007ffe1e81d880 RDI: 0000000000000005 [ 183.661972] RBP: 00007ffe1e81e890 R08: 0000000000000030 R09: 0000000000000046 [ 183.662832] R10: 0000557055dfc2e0 R11: 0000000000000246 R12: 0000557055dfb1c0 [ 183.663691] R13: 00007ffe1e81e980 R14: 0000000000000000 R15: 0000000000000000 Changes since v1: - Updated if condition with range_overflows_t [Chris Wilson] [mauld: tidy up the commit message and add Cc: stable] (cherry picked from commit 661412e301e2ca86799aa4f400d1cf0bd38c57c6) References: - https://git
ssage and add Cc: stable] (cherry picked from commit 661412e301e2ca86799aa4f400d1cf0bd38c57c6) References: - https://git.kernel.org/stable/c/89ddcc81914ab58cc203acc844f27d55ada8ec0e - https://git.kernel.org/stable/c/312d3d4f49e12f97260bcf972c848c3562126a18 - https://git.kernel.org/stable/c/5f6e560e3e86ac053447524224e411034f41f5c7 - https://git.kernel.org/stable/c/8f0ebea8f6e8c474264ed97d7a64c9c09ed4f5aa - https://git.kernel.org/stable/c/3886a86e7e6cc6ce2ce93c440fecd8f42aed0ce7
CVE ID: CVE-2022-49262 State: PUBLISHED Published: 2025-02-26T01:56:13.566Z Last Updated: 2025-05-04T08:33:37.249Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: octeontx2 - remove CONFIG_DM_CRYPT check No issues were found while using the driver with dm-crypt enabled. So CONFIG_DM_CRYPT check in the driver can be removed. This also fixes the NULL pointer dereference in driver release if CONFIG_DM_CRYPT is enabled. ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 ... Call trace: crypto_unregister_alg+0x68/0xfc crypto_unregister_skciphers+0x44/0x60 otx2_cpt_crypto_exit+0x100/0x1a0
... Call trace: crypto_unregister_alg+0x68/0xfc crypto_unregister_skciphers+0x44/0x60 otx2_cpt_crypto_exit+0x100/0x1a0 otx2_cptvf_remove+0xf8/0x200 pci_device_remove+0x3c/0xd4 __device_release_driver+0x188/0x234 device_release_driver+0x2c/0x4c ... References: - https://git.kernel.org/stable/c/e6374086f249295121384bfaa7cdcc8d461146f0 - https://git.kernel.org/stable/c/a462214866eebbca87e13ff6d73092b1c4895624 - https://git.kernel.org/stable/c/a1bf728f3388ac3a2c2dffa57e25622e90b9f6f2 - https://git.kernel.org/stable/c/2d841af23ae8f398c85dd1ff2dc24b5ec8ba4569