Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
81035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.786771] CR2: 0000000000000020 CR3: 00000003cc220002 CR4: 0000000000770ef0 [ 547.793896] PKRU: 55555554 [ 547.796600] Call Trace: [ 547.799046] <TASK> [ 547.801152] ? __die+0x20/0x70 [ 547.804211] ? page_fault_oops+0x75/0x170 [ 547.808221] ? print_hex_dump+0x100/0x160 [ 547.812226] ? exc_page_fault+0x64/0x150 [ 547.816152] ? asm_exc_page_fault+0x22/0x30 [ 547.820341] ? r535_gsp_msg_recv+0x87/0x230 [nvkm] [ 547.825184] r535_gsp_msgq_work+0x42/0x50 [nvkm] [ 547.829845] process_one_work+0x196/0x3d0 [ 547.833861] worker_thread+0x2fc/0x410 [ 547.837613] ? __pfx_worker_thread+0x10/0x10 [ 547.841885] kthread+0xdf/0x110 [ 547.845031] ? __p
er_thread+0x2fc/0x410 [ 547.837613] ? __pfx_worker_thread+0x10/0x10 [ 547.841885] kthread+0xdf/0x110 [ 547.845031] ? __pfx_kthread+0x10/0x10 [ 547.848775] ret_from_fork+0x30/0x50 [ 547.852354] ? __pfx_kthread+0x10/0x10 [ 547.856097] ret_from_fork_asm+0x1a/0x30 [ 547.860019] </TASK> [ 547.862208] Modules linked in: nvkm(E) gsp_log(E) snd_seq_dummy(E) snd_hrtimer(E) snd_seq(E) snd_timer(E) snd_seq_device(E) snd(E) soundcore(E) rfkill(E) qrtr(E) vfat(E) fat(E) ipmi_ssif(E) amd_atl(E) intel_rapl_msr(E) intel_rapl_common(E) amd64_edac(E) mlx5_ib(E) edac_mce_amd(E) kvm_amd ---truncated--- References: - https://git.kernel.org/stable/c/5185e63b45ea39339ed83f269e2ddfafb07e70d9 - https://git.kernel.or
ncated--- References: - https://git.kernel.org/stable/c/5185e63b45ea39339ed83f269e2ddfafb07e70d9 - https://git.kernel.org/stable/c/67c9cf82f50236d9c000333b26b4f95eb2c3e1b2 - https://git.kernel.org/stable/c/8d9beb4aebc02c4bd09e1d39c9c5f1c68c786dbc
CVE ID: CVE-2024-58020 State: PUBLISHED Published: 2025-02-27T02:18:10.081Z Last Updated: 2025-11-03T19:33:39.529Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt_input_configured() is not checked. Add NULL check in mt_input_configured(), to handle kernel NULL pointer dereference error. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/a04d96ef67a42165f93194eef22a270acba4b74c - https://git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935
table/c/a04d96ef67a42165f93194eef22a270acba4b74c - https://git.kernel.org/stable/c/a6bfd3856e9f3da083f177753c623d58ba935e0a - https://git.kernel.org/stable/c/2052b44cd0a62b6fdbe3371e5ba6029c56c400ca - https://git.kernel.org/stable/c/4e7113f591163d99adc7cbcd7295030c8c5d3fc7 - https://git.kernel.org/stable/c/62f8bf06262b6fc55c58f4c5256140f1382f3b01 - https://git.kernel.org/stable/c/aa879ef6d3acf96fa2c7122d0632061d4ea58d48 - https://git.kernel.org/stable/c/97c09cc2e72769edb6994b531edcfa313b96bade - https://git.kernel.org/stable/c/9b8e2220d3a052a690b1d1b23019673e612494c5
CVE ID: CVE-2024-58021 State: PUBLISHED Published: 2025-02-27T02:18:10.575Z Last Updated: 2025-10-01T19:36:40.986Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Add NULL check in winwing_init_led() devm_kasprintf() can return a NULL pointer on failure,but this returned value in winwing_init_led() is not checked. Add NULL check in winwing_init_led(), to handle kernel NULL pointer dereference error. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b99dbdee8a89c44d03ae9830ab19f31e124a3f32 - https://git.kernel.org/stable/c/4001f6f79183b8868d80dd2036dfb4ea3d325e8f - http
9dbdee8a89c44d03ae9830ab19f31e124a3f32 - https://git.kernel.org/stable/c/4001f6f79183b8868d80dd2036dfb4ea3d325e8f - https://git.kernel.org/stable/c/45ab5166a82d038c898985b0ad43ead69c1f9573
CVE ID: CVE-2024-58022 State: PUBLISHED Published: 2025-02-27T20:00:51.512Z Last Updated: 2025-10-01T19:36:39.028Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The devm_ioremap() function doesn't return error pointers, it returns NULL. Update the error checking to match. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/ecbde88e544ff016fa08bbf2156dc431bb123e9b - https://git.kernel.org/stable/c/d0f98e14c010bcf27898b635a54c1994ac4110a8
CVE ID: CVE-2024-58034 State: PUBLISHED Published: 2025-02-27T20:00:52.226Z Last Updated: 2025-11-03T19:33:40.926Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() As of_find_node_by_name() release the reference of the argument device node, tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the "emc-tables" node is always device's child node with the property "nvidia,use-ram-code", and the "lpddr2" node is a child of the "emc-tables" n
ways device's child node with the property "nvidia,use-ram-code", and the "lpddr2" node is a child of the "emc-tables" node. Thus utilize the for_each_child_of_node() macro and of_get_child_by_name() instead of of_find_node_by_name() to simplify the code. This bug was found by an experimental verification tool that I am developing. [krzysztof: applied v1, adjust the commit msg to incorporate v2 parts] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c3def10c610ae046aaa61d00528e7bd15e4ad8d3 - https://git.kernel.org/stable/c/e9d07e91de140679eeaf275f47ad154467cb9e05 - https://git.kernel.org/stable/c/c144423cb07e4e227a8572d
t.kernel.org/stable/c/e9d07e91de140679eeaf275f47ad154467cb9e05 - https://git.kernel.org/stable/c/c144423cb07e4e227a8572d5742ca2b36ada770d - https://git.kernel.org/stable/c/3b02273446e23961d910b50cc12528faec649fb2 - https://git.kernel.org/stable/c/755e44538c190c31de9090d8e8821d228fcfd416 - https://git.kernel.org/stable/c/b9784e5cde1f9fb83661a70e580e381ae1264d12
CVE ID: CVE-2024-58036 State: PUBLISHED Published: 2025-04-05T16:06:53.758Z Last Updated: 2025-09-05T13:19:24.872Z Vendors: NORBU Products: Net::Dropbox::API Problem Types: CWE-338, CWE-331 Description: Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://perldoc.perl.org/functions/rand - https://security.metacpan.org/docs/guides/random
P Vulnrichment: References: - https://perldoc.perl.org/functions/rand - https://security.metacpan.org/docs/guides/random-data-for-security.html - https://metacpan.org/release/BAREFOOT/Data-Random-0.13/source/lib/Data/Random.pm#L537 - https://metacpan.org/release/NORBU/Net-Dropbox-API-1.9/source/lib/Net/Dropbox/API.pm#L385 - https://metacpan.org/release/NORBU/Net-Dropbox-API-1.9/source/lib/Net/Dropbox/API.pm#L11
CVE ID: CVE-2024-58040 State: PUBLISHED Published: 2025-09-29T23:54:22.953Z Last Updated: 2025-09-30T13:37:53.749Z Vendors: QWER Products: Crypt::RandomEncryption Problem Types: CWE-338, CWE-331 Description: Crypt::RandomEncryption for Perl version 0.01 uses insecure rand() function during encryption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/QWER/Crypt-RandomEncryption-0.01/source/lib/Crypt/RandomEncryption.pm#L33 - https://security.metacpan.org/docs/guides/random-data-for-security.html - https://perldoc.perl.org/functions/rand
CVE ID: CVE-2024-58042 State: PUBLISHED Published: 2025-02-27T20:00:52.879Z Last Updated: 2025-10-01T19:36:38.894Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedule_work outside lock Move the hash table growth check and work scheduling outside the rht lock to prevent a possible circular locking dependency. The original implementation could trigger a lockdep warning due to a potential deadlock scenario involving nested locks between rhashtable bucket, rq lock, and dsq lock. By relocating the growth check and work scheduling after releasing the rth lock, we break this potential d
and dsq lock. By relocating the growth check and work scheduling after releasing the rth lock, we break this potential deadlock chain. This change expands the flexibility of rhashtable by removing restrictive locking that previously limited its use in scheduler and workqueue contexts. Import to say that this calls rht_grow_above_75(), which reads from struct rhashtable without holding the lock, if this is a problem, we can move the check to the lock, and schedule the workqueue after the lock. Modified so that atomic_inc is also moved outside of the bucket lock along with the growth above 75% check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable
e growth above 75% check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/eb2e58484b838fb4e777ee9721bb9e20e6ca971d - https://git.kernel.org/stable/c/ced8ce3c83a7150c5f5d371a8c332d7bc7f9b66d - https://git.kernel.org/stable/c/e1d3422c95f003eba241c176adfe593c33e8a8f6
CVE ID: CVE-2024-58043 State: PUBLISHED Published: 2025-03-04T07:10:50.452Z Last Updated: 2025-03-04T14:30:13.991Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-840 Description: Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58044 State: PUBLISHED Published: 2025-03-04T07:12:36.759Z Last Updated: 2025-03-04T14:29:47.900Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58045 State: PUBLISHED Published: 2025-03-04T07:15:38.953Z Last Updated: 2025-03-04T14:28:35.662Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58046 State: PUBLISHED Published: 2025-03-04T07:16:29.977Z Last Updated: 2025-09-18T06:48:09.811Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-840 Description: Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58047 State: PUBLISHED Published: 2025-03-04T07:18:07.685Z Last Updated: 2025-03-04T14:26:54.111Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58048 State: PUBLISHED Published: 2025-03-04T07:19:07.453Z Last Updated: 2025-03-04T14:25:57.864Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58049 State: PUBLISHED Published: 2025-03-04T07:20:00.112Z Last Updated: 2025-03-04T15:11:40.952Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-200 Description: Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58050 State: PUBLISHED Published: 2025-03-04T07:21:29.387Z Last Updated: 2025-09-18T06:48:42.107Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-276 Description: Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/3/
CVE ID: CVE-2024-58051 State: PUBLISHED Published: 2025-03-06T15:53:56.175Z Last Updated: 2025-11-03T19:33:43.664Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: Add check devm_kasprintf() returned value devm_kasprintf() can return a NULL pointer on failure but this returned value is not checked. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/1a8a17c5ce9cb5a82797602bff9819ac732d2ff5 - https://git.kernel.org/stable/c/caac520350546e736894d14e051b64a9edb3600c - https://git.kernel.org/stable/c/eb288ab33fd87579789cb331209ff09e988ff4f7 - https://git.kernel.org/stable/c/312
db3600c - https://git.kernel.org/stable/c/eb288ab33fd87579789cb331209ff09e988ff4f7 - https://git.kernel.org/stable/c/312a6445036d692bc5665307eeafa4508c33c4b5 - https://git.kernel.org/stable/c/4c9caf86d04dcb10e9fd8cd9db8eb79b5bfcc4d8 - https://git.kernel.org/stable/c/e529fbcf1f35f5fc3c839df7f06c3e3d02579715 - https://git.kernel.org/stable/c/a63284d415d4d114abd8be6e66a9558f3ca0702d - https://git.kernel.org/stable/c/2378bd0b264ad3a1f76bd957caf33ee0c7945351
CVE ID: CVE-2024-58052 State: PUBLISHED Published: 2025-03-06T15:53:56.877Z Last Updated: 2025-11-03T19:33:46.474Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table The function atomctrl_get_smc_sclk_range_table() does not check the return value of smu_atom_get_data_table(). If smu_atom_get_data_table() fails to retrieve SMU_Info table, it returns NULL which is later dereferenced. Found by Linux Verification Center (linuxtesting.org) with SVACE. In practice this should never happen as this code only gets called on polaris chips and the vbios da
ng.org) with SVACE. In practice this should never happen as this code only gets called on polaris chips and the vbios data table will always be present on those chips. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a713ba7167c2d74c477dd7764dbbdbe3199f17f4 - https://git.kernel.org/stable/c/c47066ed7c8f3b320ef87fa6217a2b8b24e127cc - https://git.kernel.org/stable/c/2396bc91935c6da0588ce07850d07897974bd350 - https://git.kernel.org/stable/c/ae522ad211ec4b72eaf742b25f24b0a406afcba1 - https://git.kernel.org/stable/c/6a30634a2e0f1dd3c6b39fd0f114c32893a9907a - https://git.kernel.org/stable/c/0b97cd8a61b2b40fd73cf92a4bb2256462d
/stable/c/6a30634a2e0f1dd3c6b39fd0f114c32893a9907a - https://git.kernel.org/stable/c/0b97cd8a61b2b40fd73cf92a4bb2256462d22adb - https://git.kernel.org/stable/c/396350adf0e5ad4bf05f01e4d79bfb82f0f6c41a - https://git.kernel.org/stable/c/357445e28ff004d7f10967aa93ddb4bffa5c3688
CVE ID: CVE-2024-58053 State: PUBLISHED Published: 2025-03-06T15:53:57.558Z Last Updated: 2025-05-04T10:08:46.815Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagation bit is performed, the calls aren't then woken up to go and process their termination, and as no further input is forthcoming, they just hang. Also add some tracing for the logging of connection aborts. References: - https://git.kernel.org/sta
ng, they just hang. Also add some tracing for the logging of connection aborts. References: - https://git.kernel.org/stable/c/9c6702260557c0183d8417c79a37777a3d3e58e8 - https://git.kernel.org/stable/c/5842ce7b120c65624052a8da04460d35b26caac0 - https://git.kernel.org/stable/c/96d1d927c4d03ee9dcee7640bca70b74e63504fc - https://git.kernel.org/stable/c/0e56ebde245e4799ce74d38419426f2a80d39950
CVE ID: CVE-2024-58054 State: PUBLISHED Published: 2025-03-06T15:53:58.243Z Last Updated: 2025-11-03T19:33:47.836Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: staging: media: max96712: fix kernel oops when removing module The following kernel oops is thrown when trying to remove the max96712 module: Unable to handle kernel paging request at virtual address 00007375746174db Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess =
0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000010af89000 [00007375746174db] pgd=0000000000000000, p4d=0000000000000000 Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: crct10dif_ce polyval_ce mxc_jpeg_encdec flexcan snd_soc_fsl_sai snd_soc_fsl_asoc_card snd_soc_fsl_micfil dwc_mipi_csi2 imx_csi_formatter polyval_generic v4l2_jpeg imx_pcm_dma can_dev snd_soc_imx_audmux snd_soc_wm8962 snd_soc_imx_card snd_soc_fsl_utils max96712(C-) rpmsg_ctrl rpmsg_char pwm_fan fuse [last unloaded: imx8_isi] CPU: 0 UID: 0
d_soc_imx_card snd_soc_fsl_utils max96712(C-) rpmsg_ctrl rpmsg_char pwm_fan fuse [last unloaded: imx8_isi] CPU: 0 UID: 0 PID: 754 Comm: rmmod Tainted: G C 6.12.0-rc6-06364-g327fec852c31 #17 Tainted: [C]=CRAP Hardware name: NXP i.MX95 19X19 board (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : led_put+0x1c/0x40 lr : v4l2_subdev_put_privacy_led+0x48/0x58 sp : ffff80008699bbb0 x29: ffff80008699bbb0 x28: ffff00008ac233c0 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: ffff000080cf1170 x22: ffff00008b53bd00 x21: ffff8000822ad1c8 x20: ffff000080ff5c00 x19: ffff00008b53be40 x18: 0000000000000000 x17: 0000000000000000 x16: 000000
21: ffff8000822ad1c8 x20: ffff000080ff5c00 x19: ffff00008b53be40 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000004 x13: ffff0000800f8010 x12: 0000000000000000 x11: ffff000082acf5c0 x10: ffff000082acf478 x9 : ffff0000800f8010 x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff6364626d x5 : 8080808000000000 x4 : 0000000000000020 x3 : 00000000553a3dc1 x2 : ffff00008ac233c0 x1 : ffff00008ac233c0 x0 : ff00737574617473 Call trace: led_put+0x1c/0x40 v4l2_subdev_put_privacy_led+0x48/0x58 v4l2_async_unregister_subdev+0x2c/0x1a4 max96712_remove+0x1c/0x38 [max96712] i2c_device_remove+0x2c/0x9c device_remove+0x4c/0x80 device_release_drive
0x2c/0x1a4 max96712_remove+0x1c/0x38 [max96712] i2c_device_remove+0x2c/0x9c device_remove+0x4c/0x80 device_release_driver_internal+0x1cc/0x228 driver_detach+0x4c/0x98 bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 i2c_del_driver+0x54/0x64 max96712_i2c_driver_exit+0x18/0x1d0 [max96712] __arm64_sys_delete_module+0x1a4/0x290 invoke_syscall+0x48/0x10c el0_svc_common.constprop.0+0xc0/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xd8 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x190/0x194 Code: f9000bf3 aa0003f3 f9402800 f9402000 (f9403400) ---[ end trace 0000000000000000 ]--- This happens because in v4l2_i2c_subdev_init(), the i2c_set_cliendata() is called again and the data is overwritten t
-- This happens because in v4l2_i2c_subdev_init(), the i2c_set_cliendata() is called again and the data is overwritten to point to sd, instead of priv. So, in remove(), the wrong pointer is passed to v4l2_async_unregister_subdev(), leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/3311c5395e7322298b659b8addc704b39fb3a59c - https://git.kernel.org/stable/c/dfde3d63afbaae664c4d36e53cfb4045d5374561 - https://git.kernel.org/stable/c/278a98f6d8a7bbe1110433b057333536e4490edf - https://git.kernel.org/stable/c/1556b9149b81cc549c13f5e56e81e89404d8a666 - https://git.kernel.org/stable/c/ee1b5046d5cd892a0754ab982aeaaad3702083a5
CVE ID: CVE-2024-58055 State: PUBLISHED Published: 2025-03-06T15:53:58.951Z Last Updated: 2025-11-03T19:33:50.627Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694 - https://git.kernel.org/stable/c/38229c35a6d7875697dfb293356407330cfcd23e - https://git.kernel.org/stable
3bf0e6ee0f694 - https://git.kernel.org/stable/c/38229c35a6d7875697dfb293356407330cfcd23e - https://git.kernel.org/stable/c/bbb7f49839b57d66ccaf7b5752d9b63d3031dd0a - https://git.kernel.org/stable/c/f0c33e7d387ccbb6870e73a43c558fefede06614 - https://git.kernel.org/stable/c/16907219ad6763f401700e1b57b2da4f3e07f047 - https://git.kernel.org/stable/c/929b69810eec132b284ffd19047a85d961df9e4d - https://git.kernel.org/stable/c/e6693595bd1b55af62d057a4136a89d5c2ddf0e9 - https://git.kernel.org/stable/c/c225d006a31949d673e646d585d9569bc28feeb9
CVE ID: CVE-2024-58056 State: PUBLISHED Published: 2025-03-06T15:53:59.641Z Last Updated: 2025-11-03T19:33:52.016Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix ida_free call while not allocated In the rproc_alloc() function, on error, put_device(&rproc->dev) is called, leading to the call of the rproc_type_release() function. An error can occurs before ida_alloc is called. In such case in rproc_type_release(), the condition (rproc->index >= 0) is true as rproc->index has been initialized to 0. ida_free() is called reporting a warning: [ 4.181906] WARNING: CPU: 1 PID: 24 at lib/idr.c:525 ida_free+0x100/0x