Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
l/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1638f430f8900f2375f5de45508fbe553997e190 - https://git.kernel.org/stable/c/d3017895e393536b234cf80a83fc463c08a28137 - https://git.kernel.org/stable/c/ad0677c37c14fa28913daea92d139644d7acf04e - https://git.kernel.org/stable/c/eba25e21dce7ec70e2b3f121b2f3a25a4ec43eca - ht
ad0677c37c14fa28913daea92d139644d7acf04e - https://git.kernel.org/stable/c/eba25e21dce7ec70e2b3f121b2f3a25a4ec43eca - https://git.kernel.org/stable/c/17e8fa894345e8d2c7a7642482267b275c3d4553 - https://git.kernel.org/stable/c/3d1b63cf468e446b9feaf4e4e73182b9cc82f460 - https://git.kernel.org/stable/c/260466b576bca0081a7d4acecc8e93687aa22d0e
CVE ID: CVE-2024-57901 State: PUBLISHED Published: 2025-01-15T13:05:57.527Z Last Updated: 2025-11-03T20:55:19.106Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK Blamed commit forgot MSG_PEEK case, allowing a crash [1] as found by syzbot. Rework vlan_get_protocol_dgram() to not touch skb at all, so that it can be used from many cpus on the same skb. Add a const qualifier to skb argument. [1] skbuff: skb_under_panic: text:ffffffff8a8ccd05 len:29 put:14 head:ffff88807fc8e400 data:ffff88807fc8e3f4 tail:0x11 end:0x140 dev:<NULL> ------------[ cut here ]------------ kernel BUG at
fff88807fc8e400 data:ffff88807fc8e3f4 tail:0x11 end:0x140 dev:<NULL> ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 5892 Comm: syz-executor883 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:skb_panic net/core/skbuff.c:206 [inline] RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216 Code: 0b 8d 48 c7 c6 86 d5 25 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 5a 69 79 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
9 50 41 54 41 57 41 56 e8 5a 69 79 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP: 0018:ffffc900038d7638 EFLAGS: 00010282 RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 609ffd18ea660600 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88802483c8d0 R08: ffffffff817f0a8c R09: 1ffff9200071ae60 R10: dffffc0000000000 R11: fffff5200071ae61 R12: 0000000000000140 R13: ffff88807fc8e400 R14: ffff88807fc8e3f4 R15: 0000000000000011 FS: 00007fbac5e006c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbac5e00d58 CR3: 000000001238e000 CR4: 00000000003526f0 DR0: 000000000
DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbac5e00d58 CR3: 000000001238e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> skb_push+0xe5/0x100 net/core/skbuff.c:2636 vlan_get_protocol_dgram+0x165/0x290 net/packet/af_packet.c:585 packet_recvmsg+0x948/0x1ef0 net/packet/af_packet.c:3552 sock_recvmsg_nosec net/socket.c:1033 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1055 ____sys_recvmsg+0x1c6/0x480 net/socket.c:2803 ___sys_recvmsg net/socket.c:2845 [inline] do_recvmmsg+0x426/0xab0 net/socket.c:2940 __sys_recvmmsg net/socket.c:3014 [inline] __do_sys_recvmmsg ne
c:2845 [inline] do_recvmmsg+0x426/0xab0 net/socket.c:2940 __sys_recvmmsg net/socket.c:3014 [inline] __do_sys_recvmmsg net/socket.c:3037 [inline] __se_sys_recvmmsg net/socket.c:3030 [inline] __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3030 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/560cbdd26b510626f3f4f27d34c44dfd3dd3499d - https://git.kernel.org/stable/c/0d3fa6c3c9ca7aa255696150f5b759ac4a4974e1 - https://git.kernel.org/stable/c/de4f8d477c67ec1d7c28f3486c3e47d147d90a01 - ht
0d3fa6c3c9ca7aa255696150f5b759ac4a4974e1 - https://git.kernel.org/stable/c/de4f8d477c67ec1d7c28f3486c3e47d147d90a01 - https://git.kernel.org/stable/c/5d336714db324bef84490c75dcc48b387ef0346e - https://git.kernel.org/stable/c/a693b87692b4d7c50f4fc08a996678d60534a9da - https://git.kernel.org/stable/c/cd8488fdc7116f6da277515647b167859d4f72b1 - https://git.kernel.org/stable/c/f91a5b8089389eb408501af2762f168c3aaa7b79
CVE ID: CVE-2024-57902 State: PUBLISHED Published: 2025-01-15T13:05:58.296Z Last Updated: 2025-11-03T20:55:22.811Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: af_packet: fix vlan_get_tci() vs MSG_PEEK Blamed commit forgot MSG_PEEK case, allowing a crash [1] as found by syzbot. Rework vlan_get_tci() to not touch skb at all, so that it can be used from many cpus on the same skb. Add a const qualifier to skb argument. [1] skbuff: skb_under_panic: text:ffffffff8a8da482 len:32 put:14 head:ffff88807a1d5800 data:ffff88807a1d5810 tail:0x14 end:0x140 dev:<NULL> ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206
fff88807a1d5810 tail:0x14 end:0x140 dev:<NULL> ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:206 ! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 5880 Comm: syz-executor172 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:skb_panic net/core/skbuff.c:206 [inline] RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216 Code: 0b 8d 48 c7 c6 9e 6c 26 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 3a 5a 79 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP: 0018:ffffc90003b
e8 3a 5a 79 f7 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 RSP: 0018:ffffc90003baf5b8 EFLAGS: 00010286 RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 8565c1eec37aa000 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88802616fb50 R08: ffffffff817f0a4c R09: 1ffff92000775e50 R10: dffffc0000000000 R11: fffff52000775e51 R12: 0000000000000140 R13: ffff88807a1d5800 R14: ffff88807a1d5810 R15: 0000000000000014 FS: 00007fa03261f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffd65753000 CR3: 0000000031720000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 000000000
0000000080050033 CR2: 00007ffd65753000 CR3: 0000000031720000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> skb_push+0xe5/0x100 net/core/skbuff.c:2636 vlan_get_tci+0x272/0x550 net/packet/af_packet.c:565 packet_recvmsg+0x13c9/0x1ef0 net/packet/af_packet.c:3616 sock_recvmsg_nosec net/socket.c:1044 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1066 ____sys_recvmsg+0x1c6/0x480 net/socket.c:2814 ___sys_recvmsg net/socket.c:2856 [inline] do_recvmmsg+0x426/0xab0 net/socket.c:2951 __sys_recvmmsg net/socket.c:3025 [inline] __do_sys_recvmmsg net/socket.c:3048 [inline] __se_sy
6/0xab0 net/socket.c:2951 __sys_recvmmsg net/socket.c:3025 [inline] __do_sys_recvmmsg net/socket.c:3048 [inline] __se_sys_recvmmsg net/socket.c:3041 [inline] __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3041 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/66ffb0cf2125dcf9e902eede4a43653a24fd9cb2 - https://git.kernel.org/stable/c/fa57f07ba0622c8692f40e1300adca59277b0044 - https://git.kernel.org/stable/c/65c67049e9ed481f6b52264b39618b8c6dfb1d3e - https://git.kernel.org/stable/c/d91b4a9baa018a001d5c884e236c0cfd31f9f4a1 -
c/65c67049e9ed481f6b52264b39618b8c6dfb1d3e - https://git.kernel.org/stable/c/d91b4a9baa018a001d5c884e236c0cfd31f9f4a1 - https://git.kernel.org/stable/c/7aa78d0d8546d8ce5a764add3f55d72e707c18f1 - https://git.kernel.org/stable/c/b65292a548d847099a4fe0fff53122a06e798e25 - https://git.kernel.org/stable/c/77ee7a6d16b6ec07b5c3ae2b6b60a24c1afbed09
CVE ID: CVE-2024-57903 State: PUBLISHED Published: 2025-01-15T13:05:59.264Z Last Updated: 2025-11-03T20:55:24.238Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_REUSEPORT to inet sockets After blamed commit, crypto sockets could accidentally be destroyed from RCU call back, as spotted by zyzbot [1]. Trying to acquire a mutex in RCU callback is not allowed. Restrict SO_REUSEPORT socket option to inet sockets. v1 of this patch supported TCP, UDP and SCTP sockets, but fcnal-test.sh test needed RAW and ICMP support. [1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 in_atomic(): 1
AW and ICMP support. [1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1 preempt_count: 100, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by ksoftirqd/1/24: #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline] #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823 Preemption disabled at: [<ffffffff8161c8c8>] softirq_handle_begin kernel/softirq.c:402 [inline] [<ffffffff8161c8c8>] ha
Preemption disabled at: [<ffffffff8161c8c8>] softirq_handle_begin kernel/softirq.c:402 [inline] [<ffffffff8161c8c8>] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537 CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 __might_resched+0x5d4/0x780 kernel/sched/core.c:8758 __mutex_lock_common kernel/locking/mutex.c:562 [inline] __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735 crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179 aead_rele
ock+0x131/0xee0 kernel/locking/mutex.c:735 crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179 aead_release+0x3d/0x50 crypto/algif_aead.c:489 alg_do_release crypto/af_alg.c:118 [inline] alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502 __sk_destruct+0x58/0x5f0 net/core/sock.c:2260 rcu_do_batch kernel/rcu/tree.c:2567 [inline] rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 run_ksoftirqd+0xca/0x130 kernel/softirq.c:950 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> Additio
m_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK> Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/579cfa595af1e00ccc9c3a849a4add6bba8b4bad - https://git.kernel.org/stable/c/ad2ad4cd11af9d63187cd074314b71b7cf8a2a59 - https://git.kernel.org/stable/c/ad91a2dacbf8c26a446658cdd55e8324dfeff1e7 - https://git.kernel.org/stable/c/3257813a3ae7462ac5cde04e120806f0c0776850 - https://git.kernel.org/stable/c/5b0af621c3f6ef9261cf6067812f2fd9943acb4b
CVE ID: CVE-2024-57904 State: PUBLISHED Published: 2025-01-19T11:52:28.982Z Last Updated: 2025-11-03T20:55:27.822Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocated iio_dev Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached before the allocated iio_dev is stored to st->ts_input. Thus call input_free_device() on input instead of st->ts_input. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/b549c90bfe66f704878aa1e57b30ba15dab71935 - https://git.kernel.org/st
iner: References: - https://git.kernel.org/stable/c/b549c90bfe66f704878aa1e57b30ba15dab71935 - https://git.kernel.org/stable/c/ac8d932e3214c10ec641ad45a253929a596ead62 - https://git.kernel.org/stable/c/028a1ba8e3bae593d701aee4f690ce7c195b67d6 - https://git.kernel.org/stable/c/25ef52f1c15db67d890b80203a911b9a57b0bf71 - https://git.kernel.org/stable/c/09e067e3c83e0695d338e8a26916e3c2bc44be02 - https://git.kernel.org/stable/c/d115b7f3ddc03b38bb7e8754601556fe9b4fc034 - https://git.kernel.org/stable/c/de6a73bad1743e9e81ea5a24c178c67429ff510b
CVE ID: CVE-2024-57905 State: PUBLISHED Published: 2025-01-19T11:52:29.699Z Last Updated: 2025-10-01T19:57:16.772Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in triggered buffer The 'scan' local struct is used to push data to user space from a triggered buffer, but it has a hole between the sample (unsigned int) and the timestamp. This hole is never initialized. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2f1687cca911a2f294313c7
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2f1687cca911a2f294313c762e0646cd9e7be8cc - https://git.kernel.org/stable/c/75f339d3ecd38cb1ce05357d647189d4a7f7ed08
CVE ID: CVE-2024-57906 State: PUBLISHED Published: 2025-01-19T11:52:30.365Z Last Updated: 2025-11-03T20:55:31.340Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in triggered buffer The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the array to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.ker
to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1c80a0985a9a14f33dbf63cd703ca010f094f878 - https://git.kernel.org/stable/c/3bf8d1e87939b8a19c9b738564fddf5b73322f2f - https://git.kernel.org/stable/c/aae96738006840533cf147ffd5f41830987f21c5 - https://git.kernel.org/stable/c/ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d - https://git.kernel.org/stable/c/455df95eb8f24a37abc549d6738fc8ee07eb623b - https://git.kernel.org/stable/c/485570ed82b7a6bb109fa1d0a79998e21f7f4c73 - https://git.kernel.org/stable/c/2a7377ccfd940cd6e9201756aff1e7852c266e69
CVE ID: CVE-2024-57907 State: PUBLISHED Published: 2025-01-19T11:52:31.039Z Last Updated: 2025-11-03T20:55:34.143Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in triggered buffer The 'data' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gi
ation to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/85a9c98a5e0f22d911b00077d751e34fff1401aa - https://git.kernel.org/stable/c/7a07fb80ea886e9134284a27d0155cca7649e293 - https://git.kernel.org/stable/c/64b79afdca7b27a768c7d3716b7f4deb1d6b955c - https://git.kernel.org/stable/c/5a95fbbecec7a34bbad5dcc3156700b8711d53c4 - https://git.kernel.org/stable/c/8193941bc4fe7247ff13233f328aea709f574554 - https://git.kernel.org/stable/c/38724591364e1e3b278b4053f102b49ea06ee17c
CVE ID: CVE-2024-57908 State: PUBLISHED Published: 2025-01-19T11:52:31.714Z Last Updated: 2025-11-03T20:55:36.947Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered buffer The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the array to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.o
serspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0871eb8d700b33dd7fa86c80630d62ddaef58c2c - https://git.kernel.org/stable/c/a386d9d2dc6635f2ec210b8199cfb3acf4d31305 - https://git.kernel.org/stable/c/a07f698084412a3ef5e950fcac1d6b0f53289efd - https://git.kernel.org/stable/c/6985ba4467e4b15b809043fa7740d1fb23a1897b - https://git.kernel.org/stable/c/cde312e257b59ecaa0fad3af9ec7e2370bb24639 - https://git.kernel.org/stable/c/565814cbbaa674d2901428796801de49a611e59d - https://git.kernel.org/stable/c/6ae053113f6a226a2303caa4936a4c37f3bfff7b
CVE ID: CVE-2024-57909 State: PUBLISHED Published: 2025-01-19T11:52:32.408Z Last Updated: 2025-10-01T19:57:16.219Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in triggered buffer The 'scan' local struct is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1cca2a666e
o userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1cca2a666e099aa018e5ab385f0a6e01a3053629 - https://git.kernel.org/stable/c/b62fbe3b8eedd3cf3c9ad0b7cb9f72c3f40815f0
CVE ID: CVE-2024-57910 State: PUBLISHED Published: 2025-01-19T11:52:33.140Z Last Updated: 2025-11-03T20:55:39.753Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in triggered buffer The 'buffer' local array is used to push data to userspace from a triggered buffer, but it does not set an initial value for the single data element, which is an u16 aligned to 8 bytes. That leaves at least 4 bytes uninitialized even after writing an integer value with regmap_read(). Initialize the array to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Note
alize the array to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/13e56229fc81051a42731046e200493c4a7c28ff - https://git.kernel.org/stable/c/b0e9c11c762e4286732d80e66c08c2cb3157b06b - https://git.kernel.org/stable/c/cb488706cdec0d6d13f2895bcdf0c32b283a7cc7 - https://git.kernel.org/stable/c/47d245be86492974db3aeb048609542167f56518 - https://git.kernel.org/stable/c/a15ea87d4337479c9446b5d71616f4668337afed - https://git.kernel.org/stable/c/f6fb1c59776b4263634c472a5be8204c906ffc2c - https://git.kernel.org/stable/c/47b43e53c0a0edf5578d5d12f5fc71c
.org/stable/c/f6fb1c59776b4263634c472a5be8204c906ffc2c - https://git.kernel.org/stable/c/47b43e53c0a0edf5578d5d12f5fc71c019649279
CVE ID: CVE-2024-57911 State: PUBLISHED Published: 2025-01-19T11:52:33.806Z Last Updated: 2025-11-03T20:55:42.580Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer The 'data' array is allocated via kmalloc() and it is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses iio_for_each_active_channel() to assign new values. Use kzalloc for the memory allocation to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/03fa47621bf8fcbf5994c5716021527853f9af3d - https://git.kernel.org/stable/c/e1c1e8c05010103c9c9ea3e9c4304b0b7e2c8e4a - https://git.kernel.org/stable/c/006073761888a632c5d6f93e47c41760fa627f77 - https://git.kernel.org/stable/c/b0642d9c871aea1f28eb02cd84d60434df594f67 - https://git.kernel.org/stable/c/74058395b2c63c8a438cf199d09094b640f8c7f4 - https://git.kernel.org/stable/c/ea703cda36da0dacb9a2fd876370003197d8a019 - https://git.kernel.org/stable/c/333be433ee908a53f283beb95585dfc14c8ffb46
CVE ID: CVE-2024-57912 State: PUBLISHED Published: 2025-01-19T11:52:34.490Z Last Updated: 2025-11-03T20:55:45.380Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in triggered buffer The 'sample' local struct is used to push data to user space from a triggered buffer, but it has a hole between the temperature and the timestamp (u32 pressure, u16 temperature, GAP, u64 timestamp). This hole is never initialized. Initialize the struct to zero before using it to avoid pushing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
shing uninitialized information to userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9629ff1a86823269b12fb1ba9ca4efa945906287 - https://git.kernel.org/stable/c/d25f1fc273670271412a52a1efbdaf5dcf274ed8 - https://git.kernel.org/stable/c/64a989aa7475b8e76e69b9ec86819ea293e53bab - https://git.kernel.org/stable/c/b7849f62e61242e0e02c776e1109eb81e59c567c - https://git.kernel.org/stable/c/fefb88a4da961a0b9c2473cbdcfce1a942fcfa9a - https://git.kernel.org/stable/c/979a0db76ceda8fe1f2f85a116bfe97620ebbadf - https://git.kernel.org/stable/c/6007d10c5262f6f71479627c1216899ea7f09073
CVE ID: CVE-2024-57913 State: PUBLISHED Published: 2025-01-19T11:52:35.149Z Last Updated: 2025-11-03T20:55:48.145Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bind This commit addresses an issue related to below kernel panic where panic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON in functionsfs_bind, which easily leads to the following scenarios. 1.adb_write in adbd 2. UDC write via configfs ================= ===================== ->usb_ffs_open_thread() ->UDC write ->open_functionfs() ->configfs_write_iter() ->adb_open() ->gadget_dev_desc_UDC_store() ->a