Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52687 State: PUBLISHED Published: 2024-05-17T14:24:48.665Z Last Updated: 2025-05-04T07:41:33.664Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: safexcel - Add error handling for dma_map_sg() calls Macro dma_map_sg() may return 0 on error. This patch enables checks in case of the macro failure and ensures unmapping of previously mapped buffers with dma_unmap_sg(). Found by Linux Verification Center (linuxtesting.org) with static analysis tool SVACE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4c0ac81a172a69a7733290915276672787
Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4c0ac81a172a69a7733290915276672787e904ec - https://git.kernel.org/stable/c/8084b788c2fb1260f7d44c032d5124680b20d2b2 - https://git.kernel.org/stable/c/fc0b785802b856566df3ac943e38a072557001c4 - https://git.kernel.org/stable/c/87e02063d07708cac5bfe9fd3a6a242898758ac8
CVE ID: CVE-2023-52688 State: PUBLISHED Published: 2024-05-17T14:24:49.321Z Last Updated: 2025-05-04T07:41:34.800Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix the error handler of rfkill config When the core rfkill config throws error, it should free the allocated resources. Currently it is not freeing the core pdev create resources. Avoid this issue by calling the core pdev destroy in the error handler of core rfkill config. Found this issue in the code review and it is compile tested only. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stab
y. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b4e593a7a22fa3c7d0550ef51c90b5c21f790aa8 - https://git.kernel.org/stable/c/898d8b3e1414cd900492ee6a0b582f8095ba4a1a
CVE ID: CVE-2023-52689 State: PUBLISHED Published: 2024-05-17T14:24:49.975Z Last Updated: 2025-05-04T07:41:40.899Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing mutex lock around get meter levels As scarlett2_meter_ctl_get() uses meter_level_map[], the data_mutex should be locked while accessing it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/74e3de7cdcc31ce75ab42350ae0946eff62a2da2 - https://git.kernel.org/stable/c/993f7b42fa066b055e3a19b7f76ad8157c0927a0
CVE ID: CVE-2023-52690 State: PUBLISHED Published: 2024-05-17T14:24:50.648Z Last Updated: 2025-05-04T07:41:42.077Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check to scom_debug_init_one() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Add a null pointer check, and release 'ent' to avoid memory leaks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f84c1446daa552e9699da8d1f8375eac0f65edc7 - https://git.kernel.org/stable/c/1eefa93faf69188540b08b024794fa90b1d82e8b - https
c1446daa552e9699da8d1f8375eac0f65edc7 - https://git.kernel.org/stable/c/1eefa93faf69188540b08b024794fa90b1d82e8b - https://git.kernel.org/stable/c/2a82c4439b903639e0a1f21990cd399fb0a49c19 - https://git.kernel.org/stable/c/ed8d023cfa97b559db58c0e1afdd2eec7a83d8f2 - https://git.kernel.org/stable/c/dd8422ff271c22058560832fc3006324ded895a9 - https://git.kernel.org/stable/c/a9c05cbb6644a2103c75b6906e9dafb9981ebd13 - https://git.kernel.org/stable/c/9a260f2dd827bbc82cc60eb4f4d8c22707d80742
CVE ID: CVE-2023-52691 State: PUBLISHED Published: 2024-05-17T14:24:51.294Z Last Updated: 2025-05-04T07:41:43.209Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a double-free in si_dpm_init When the allocation of adev->pm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails, amdgpu_free_extended_power_table is called to free some fields of adev. However, when the control flow returns to si_dpm_sw_init, it goes to label dpm_failed and calls si_dpm_fini, which calls amdgpu_free_extended_power_table again and free those fields again. Thus a double-free is triggered. Additional Analyst Notes: - CISA ADP Vulnrichm
table again and free those fields again. Thus a double-free is triggered. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/afe9f5b871f86d58ecdc45b217b662227d7890d0 - https://git.kernel.org/stable/c/06d95c99d5a4f5accdb79464076efe62e668c706 - https://git.kernel.org/stable/c/aeed2b4e4a70c7568d4a5eecd6a109713c0dfbf4 - https://git.kernel.org/stable/c/2bf47c89bbaca2bae16581ef1b28aaec0ade0334 - https://git.kernel.org/stable/c/f957a1be647f7fc65926cbf572992ec2747a93f2 - https://git.kernel.org/stable/c/fb1936cb587262cd539e84b34541abb06e42b2f9 - https://git.kernel.org/stable/c/ca8e2e251c65e5a712f6025e27bd9b26d16e6f4a - https://git
87262cd539e84b34541abb06e42b2f9 - https://git.kernel.org/stable/c/ca8e2e251c65e5a712f6025e27bd9b26d16e6f4a - https://git.kernel.org/stable/c/ac16667237a82e2597e329eb9bc520d1cf9dff30
CVE ID: CVE-2023-52692 State: PUBLISHED Published: 2024-05-17T14:27:25.852Z Last Updated: 2025-05-04T07:41:44.609Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() scarlett2_usb_set_config() calls scarlett2_usb_get() but was not checking the result. Return the error if it fails rather than continuing with an invalid value. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/51d5697e1c0380d482c3eab002bfc8d0be177e99 - https://git.kernel.org/stable/c/be96acd3eaa790d10a5b33e65267f52d02f6ad88 - h
/51d5697e1c0380d482c3eab002bfc8d0be177e99 - https://git.kernel.org/stable/c/be96acd3eaa790d10a5b33e65267f52d02f6ad88 - https://git.kernel.org/stable/c/996fde492ad9b9563ee483b363af40d7696a8467 - https://git.kernel.org/stable/c/145c5aa51486171025ab47f35cff34bff8d0cea3 - https://git.kernel.org/stable/c/ca459dfa7d4ed9098fcf13e410963be6ae9b6bf3
CVE ID: CVE-2023-52693 State: PUBLISHED Published: 2024-05-17T14:27:26.514Z Last Updated: 2025-05-04T07:41:45.802Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ACPI: video: check for error while searching for backlight device parent If acpi_get_parent() called in acpi_video_dev_register_backlight() fails, for example, because acpi_ut_acquire_mutex() fails inside acpi_get_parent), this can lead to incorrect (uninitialized) acpi_parent handle being passed to acpi_get_pci_dev() for detecting the parent pci device. Check acpi_get_parent() result and set parent device only in case of success. Found by Linux Verification Center (li
ce. Check acpi_get_parent() result and set parent device only in case of success. Found by Linux Verification Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/556f02699d33c1f40b1b31bd25828ce08fa165d8 - https://git.kernel.org/stable/c/1e3a2b9b4039bb4d136dca59fb31e06465e056f3 - https://git.kernel.org/stable/c/c4e1a0ef0b4782854c9b77a333ca912b392bed2f - https://git.kernel.org/stable/c/3a370502a5681986f9828e43be75ce26c6ab24af - https://git.kernel.org/stable/c/2124c5bc22948fc4d09a23db4a8acdccc7d21e95 - https://git.kernel.org/stable/c/39af144b6d01d9b40f52e5d773e653957e6c379c - https://git.
948fc4d09a23db4a8acdccc7d21e95 - https://git.kernel.org/stable/c/39af144b6d01d9b40f52e5d773e653957e6c379c - https://git.kernel.org/stable/c/72884ce4e10417b1233b614bf134da852df0f15f - https://git.kernel.org/stable/c/ccd45faf4973746c4f30ea41eec864e5cf191099
CVE ID: CVE-2023-52694 State: PUBLISHED Published: 2024-05-17T14:27:27.169Z Last Updated: 2025-05-04T07:41:46.930Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function With tpd12s015_remove() marked with __exit this function is discarded when the driver is compiled as a built-in. The result is that when the driver unbinds there is no cleanup done which results in resource leakage or worse. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/53926e2a39629702f7f809d614b3ca89c2478205 - https://git
Program Container: References: - https://git.kernel.org/stable/c/53926e2a39629702f7f809d614b3ca89c2478205 - https://git.kernel.org/stable/c/08ccff6ece35f08e8107e975903c370d849089e5 - https://git.kernel.org/stable/c/81f1bd85960b7a089a91e679ff7cd2524390bbf1 - https://git.kernel.org/stable/c/a8657406e12aa10412134622c58977ac657f16d2 - https://git.kernel.org/stable/c/e00ec5901954d85b39b5f10f94e60ab9af463eb1 - https://git.kernel.org/stable/c/ce3e112e7ae854249d8755906acc5f27e1542114
CVE ID: CVE-2023-52695 State: PUBLISHED Published: 2024-05-17T14:27:27.912Z Last Updated: 2025-05-04T07:41:48.207Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check writeback connectors in create_validate_stream_for_sink [WHY & HOW] This is to check connector type to avoid unhandled null pointer for writeback connectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0fe85301b95077ac4fa4a91909d38b7341e81187 - https://git.kernel.org/stable/c/dbf5d3d02987faa0eec3710dd687cd912362d7b5
CVE ID: CVE-2023-52696 State: PUBLISHED Published: 2024-05-17T14:27:28.583Z Last Updated: 2025-05-04T07:41:49.530Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv: Add a null pointer check in opal_powercap_init() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9da4a56dd3772570512ca58aa8832b052ae910dc - https://git.kernel.org/stable/c/a67a04ad05acb56640798625e73fa54d6d41cce1 - https://git.kernel.org/stable/c/6b58d16037217d0c64a2a09b655f370403ec7219
e/c/a67a04ad05acb56640798625e73fa54d6d41cce1 - https://git.kernel.org/stable/c/6b58d16037217d0c64a2a09b655f370403ec7219 - https://git.kernel.org/stable/c/f152a6bfd187f67afeffc9fd68cbe46f51439be0 - https://git.kernel.org/stable/c/69f95c5e9220f77ce7c540686b056c2b49e9a664 - https://git.kernel.org/stable/c/b02ecc35d01a76b4235e008d2dd292895b28ecab - https://git.kernel.org/stable/c/e123015c0ba859cf48aa7f89c5016cc6e98e018d
CVE ID: CVE-2023-52697 State: PUBLISHED Published: 2024-05-17T14:27:29.232Z Last Updated: 2025-05-04T07:41:50.739Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL sof_sdw_rt_sdca_jack_exit() are used by different codecs, and some of them use the same dai name. For example, rt712 and rt713 both use "rt712-sdca-aif1" and sof_sdw_rt_sdca_jack_exit(). As a result, sof_sdw_rt_sdca_jack_exit() will be called twice by mc_dailink_exit_loop(). Set ctx->headset_codec_dev = NULL; after put_device(ctx->headset_codec_dev); to avoid ctx->headset_codec_dev being put twice.
tx->headset_codec_dev = NULL; after put_device(ctx->headset_codec_dev); to avoid ctx->headset_codec_dev being put twice. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a410d58117d6da4b7d41f3c91365f191d006bc3d - https://git.kernel.org/stable/c/582231a8c4f73ac153493687ecc1bed853e9c9ef - https://git.kernel.org/stable/c/e38e252dbceeef7d2f848017132efd68e9ae1416
CVE ID: CVE-2023-52698 State: PUBLISHED Published: 2024-05-17T14:27:29.885Z Last Updated: 2025-05-04T07:41:51.813Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlbl_calipso_add_pass() If IPv6 support is disabled at boot (ipv6.disable=1), the calipso_init() -> netlbl_calipso_ops_register() function isn't called, and the netlbl_calipso_ops_get() function always returns NULL. In this case, the netlbl_calipso_add_pass() function allocates memory for the doi_def variable but doesn't free it with the calipso_doi_free(). BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-execut
free it with the calipso_doi_free(). BUG: memory leak unreferenced object 0xffff888011d68180 (size 64): comm "syz-executor.1", pid 10746, jiffies 4295410986 (age 17.928s) hex dump (first 32 bytes): 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<...>] kmalloc include/linux/slab.h:552 [inline] [<...>] netlbl_calipso_add_pass net/netlabel/netlabel_calipso.c:76 [inline] [<...>] netlbl_calipso_add+0x22e/0x4f0 net/netlabel/netlabel_calipso.c:111 [<...>] genl_family_rcv_msg_doit+0x22f/0x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0
x330 net/netlink/genetlink.c:739 [<...>] genl_family_rcv_msg net/netlink/genetlink.c:783 [inline] [<...>] genl_rcv_msg+0x341/0x5a0 net/netlink/genetlink.c:800 [<...>] netlink_rcv_skb+0x14d/0x440 net/netlink/af_netlink.c:2515 [<...>] genl_rcv+0x29/0x40 net/netlink/genetlink.c:811 [<...>] netlink_unicast_kernel net/netlink/af_netlink.c:1313 [inline] [<...>] netlink_unicast+0x54b/0x800 net/netlink/af_netlink.c:1339 [<...>] netlink_sendmsg+0x90a/0xdf0 net/netlink/af_netlink.c:1934 [<...>] sock_sendmsg_nosec net/socket.c:651 [inline] [<...>] sock_sendmsg+0x157/0x190 net/socket.c:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] _
:671 [<...>] ____sys_sendmsg+0x712/0x870 net/socket.c:2342 [<...>] ___sys_sendmsg+0xf8/0x170 net/socket.c:2396 [<...>] __sys_sendmsg+0xea/0x1b0 net/socket.c:2429 [<...>] do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 [<...>] entry_SYSCALL_64_after_hwframe+0x61/0xc6 Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller [PM: merged via the LSM tree at Jakub Kicinski request] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9a8f811a146aa2a0230f8edb2e9f4b6609aab8da - https://git.kernel.org/stable/c/36e19f84634aaa94f543fedc0a07588949638d53 - https://git.kernel.org/stable/c/44a88650ba5
- https://git.kernel.org/stable/c/36e19f84634aaa94f543fedc0a07588949638d53 - https://git.kernel.org/stable/c/44a88650ba55e6a7f2ec485d2c2413ba7e216f01 - https://git.kernel.org/stable/c/a4529a08d3704c17ea9c7277d180e46b99250ded - https://git.kernel.org/stable/c/321b3a5592c8a9d6b654c7c64833ea67dbb33149 - https://git.kernel.org/stable/c/408bbd1e1746fe33e51f4c81c2febd7d3841d031 - https://git.kernel.org/stable/c/f14d36e6e97fe935a20e0ceb159c100f90b6627c - https://git.kernel.org/stable/c/ec4e9d630a64df500641892f4e259e8149594a99
CVE ID: CVE-2023-52699 State: PUBLISHED Published: 2024-05-19T10:10:30.381Z Last Updated: 2025-05-04T07:41:52.866Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sysv: don't call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic context in SysV filesystem [1], for sb_bread() is called with rw_spinlock held. A "write_lock(&pointers_lock) => read_lock(&pointers_lock) deadlock" bug and a "sb_bread() with write_lock(&pointers_lock)" bug were introduced by "Replace BKL for chain locking with sysvfs-private rwlock" in Linux 2.5.12. Then, "[PATCH] err1-40: sysvfs locking fix" in Linux 2.6.8 fixed the former bug by
svfs-private rwlock" in Linux 2.5.12. Then, "[PATCH] err1-40: sysvfs locking fix" in Linux 2.6.8 fixed the former bug by moving pointers_lock lock to the callers, but instead introduced a "sb_bread() with read_lock(&pointers_lock)" bug (which made this problem easier to hit). Al Viro suggested that why not to do like get_branch()/get_block()/ find_shared() in Minix filesystem does. And doing like that is almost a revert of "[PATCH] err1-40: sysvfs locking fix" except that get_branch() from with find_shared() is called without write_lock(&pointers_lock). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/13b33feb2ebddc2b1a
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/13b33feb2ebddc2b1aa607f553566b18a4af1d76 - https://git.kernel.org/stable/c/1b4fe801b5bedec2b622ddb18e5c9bf26c63d79f - https://git.kernel.org/stable/c/674c1c4229e743070e09db63a23442950ff000d1 - https://git.kernel.org/stable/c/fd203d2c671bdee9ab77090ff394d3b71b627927 - https://git.kernel.org/stable/c/53cb1e52c9db618c08335984d1ca80db220ccf09 - https://git.kernel.org/stable/c/89e8524135a3902e7563a5a59b7b5ec1bf4904ac - https://git.kernel.org/stable/c/a69224223746ab96d43e5db9d22d136827b7e2d3 - https://git.kernel.org/stable/c/f123dc86388cb669c3d6322702dc441abc35c31e
CVE ID: CVE-2023-52700 State: PUBLISHED Published: 2024-05-21T15:22:50.702Z Last Updated: 2025-05-04T07:41:53.991Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tipc: fix kernel warning when sending SYN message When sending a SYN message, this kernel stack trace is observed: ... [ 13.396352] RIP: 0010:_copy_from_iter+0xb4/0x550 ... [ 13.398494] Call Trace: [ 13.398630] <TASK> [ 13.398630] ? __alloc_skb+0xed/0x1a0 [ 13.398630] tipc_msg_build+0x12c/0x670 [tipc] [ 13.398630] ? shmem_add_to_page_cache.isra.71+0x151/0x290 [ 13.398630] __tipc_sendmsg+0x2d1/0x710 [tipc] [ 13.398630] ? tipc_connect+0x1d9/0x230 [tipc] [ 13.398630] ? __
51/0x290 [ 13.398630] __tipc_sendmsg+0x2d1/0x710 [tipc] [ 13.398630] ? tipc_connect+0x1d9/0x230 [tipc] [ 13.398630] ? __local_bh_enable_ip+0x37/0x80 [ 13.398630] tipc_connect+0x1d9/0x230 [tipc] [ 13.398630] ? __sys_connect+0x9f/0xd0 [ 13.398630] __sys_connect+0x9f/0xd0 [ 13.398630] ? preempt_count_add+0x4d/0xa0 [ 13.398630] ? fpregs_assert_state_consistent+0x22/0x50 [ 13.398630] __x64_sys_connect+0x16/0x20 [ 13.398630] do_syscall_64+0x42/0x90 [ 13.398630] entry_SYSCALL_64_after_hwframe+0x63/0xcd It is because commit a41dad905e5a ("iov_iter: saner checks for attempt to copy to/from iterator") has introduced sanity check for copying from/to iov iterator. Lacking of copy direction from the iter
to/from iterator") has introduced sanity check for copying from/to iov iterator. Lacking of copy direction from the iterator viewpoint would lead to kernel stack trace like above. This commit fixes this issue by initializing the iov iterator with the correct copy direction when sending SYN or ACK without data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/54b6082aec178f16ad6d193b4ecdc9c4823d9a32 - https://git.kernel.org/stable/c/11a4d6f67cf55883dc78e31c247d1903ed7feccc
CVE ID: CVE-2023-52701 State: PUBLISHED Published: 2024-05-21T15:22:51.354Z Last Updated: 2025-05-04T07:41:55.146Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: use a bounce buffer for copying skb->mark syzbot found arm64 builds would crash in sock_recv_mark() when CONFIG_HARDENED_USERCOPY=y x86 and powerpc are not detecting the issue because they define user_access_begin. This will be handled in a different patch, because a check_object_size() is missing. Only data from skb->cb[] can be copied directly to/from user space, as explained in commit 79a8a642bf05 ("net: Whitelist the skbuff_head_cache "cb" field") syzbot repor
to/from user space, as explained in commit 79a8a642bf05 ("net: Whitelist the skbuff_head_cache "cb" field") syzbot report was: usercopy: Kernel memory exposure attempt detected from SLUB object 'skbuff_head_cache' (offset 168, size 4)! ------------[ cut here ]------------ kernel BUG at mm/usercopy.c:102 ! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4410 Comm: syz-executor533 Not tainted 6.2.0-rc7-syzkaller-17907-g2d3827b3f393 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usercopy_abort+0x90/0x94 mm/usercopy.c:90 lr : usercopy_abo
60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : usercopy_abort+0x90/0x94 mm/usercopy.c:90 lr : usercopy_abort+0x90/0x94 mm/usercopy.c:90 sp : ffff80000fb9b9a0 x29: ffff80000fb9b9b0 x28: ffff0000c6073400 x27: 0000000020001a00 x26: 0000000000000014 x25: ffff80000cf52000 x24: fffffc0000000000 x23: 05ffc00000000200 x22: fffffc000324bf80 x21: ffff0000c92fe1a8 x20: 0000000000000001 x19: 0000000000000004 x18: 0000000000000000 x17: 656a626f2042554c x16: ffff0000c6073dd0 x15: ffff80000dbd2118 x14: ffff0000c6073400 x13: 00000000ffffffff x12: ffff0000c6073400 x11: ff808000081bbb4c x10: 0000000000000000 x9 : 7b0572d7cc0ccf00 x8 : 7b0572d7cc0ccf00 x7 : ffff80000bf650d4 x6 : 0000000000000000
0081bbb4c x10: 0000000000000000 x9 : 7b0572d7cc0ccf00 x8 : 7b0572d7cc0ccf00 x7 : ffff80000bf650d4 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0001fefbff08 x1 : 0000000100000000 x0 : 000000000000006c Call trace: usercopy_abort+0x90/0x94 mm/usercopy.c:90 __check_heap_object+0xa8/0x100 mm/slub.c:4761 check_heap_object mm/usercopy.c:196 [inline] __check_object_size+0x208/0x6b8 mm/usercopy.c:251 check_object_size include/linux/thread_info.h:199 [inline] __copy_to_user include/linux/uaccess.h:115 [inline] put_cmsg+0x408/0x464 net/core/scm.c:238 sock_recv_mark net/socket.c:975 [inline] __sock_recv_cmsgs+0x1fc/0x248 net/socket.c:984 sock_recv_cmsg
et/core/scm.c:238 sock_recv_mark net/socket.c:975 [inline] __sock_recv_cmsgs+0x1fc/0x248 net/socket.c:984 sock_recv_cmsgs include/net/sock.h:2728 [inline] packet_recvmsg+0x2d8/0x678 net/packet/af_packet.c:3482 ____sys_recvmsg+0x110/0x3a0 ___sys_recvmsg net/socket.c:2737 [inline] __sys_recvmsg+0x194/0x210 net/socket.c:2767 __do_sys_recvmsg net/socket.c:2777 [inline] __se_sys_recvmsg net/socket.c:2774 [inline] __arm64_sys_recvmsg+0x2c/0x3c net/socket.c:2774 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x64/0x178 arch/arm64/kernel/syscall.c:52 el0_svc_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0
c_common+0xbc/0x180 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x110 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 Code: 91388800 aa0903e1 f90003e8 94e6d752 (d4210000) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/863a7de987f02a901bf215509276a7de0370e0f9 - https://git.kernel.org/stable/c/2558b8039d059342197610498c8749ad294adee5
CVE ID: CVE-2023-52702 State: PUBLISHED Published: 2024-05-21T15:22:52.017Z Last Updated: 2025-05-04T07:41:56.360Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() old_meter needs to be free after it is detached regardless of whether the new meter is successfully attached. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6 - https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536 - https://git.kernel.org/stable/c/e336a9e08618203a456fb5367