Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
_held_locks+0x49/0x70 arfs_del_rules+0x143/0x1e0 [mlx5_core] mlx5e_arfs_disable+0x1b/0x30 [mlx5_core] mlx5e_ethtool_set_channels+0xcb/0x200 [mlx5_core] ethnl_set_channels+0x28f/0x3b0 ethnl_default_set_doit+0xec/0x240 genl_family_rcv_msg_doit+0xd0/0x120 genl_rcv_msg+0x188/0x2c0 ? ethn ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/46efa4d5930cf3c2af8c01f75e0a47e4fc045e3b - https://git.kernel.org/stable/c/48c4bb81df19402d4346032353d0795260255e3b - https://git.kernel.org/stable/c/0080bf99499468030248ebd25dd645e487dcecdc - https://git.kernel.org/stable/c/fef965764cf562f28afb997b626fc7c3cec99693
CVE ID: CVE-2024-27015 State: PUBLISHED Published: 2024-05-01T05:29:52.281Z Last Updated: 2025-11-04T17:17:15.835Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e719b52d0c56989b0f3475a03a6d64f182c85b56 - https://git.k
rogram Container: References: - https://git.kernel.org/stable/c/e719b52d0c56989b0f3475a03a6d64f182c85b56 - https://git.kernel.org/stable/c/f1c3c61701a0b12f4906152c1626a5de580ea3d2 - https://git.kernel.org/stable/c/4ed82dd368ad883dc4284292937b882f044e625d - https://git.kernel.org/stable/c/e3f078103421642fcd5f05c5e70777feb10f000d - https://git.kernel.org/stable/c/6db5dc7b351b9569940cd1cf445e237c42cd6d27
CVE ID: CVE-2024-27016 State: PUBLISHED Published: 2024-05-01T05:29:57.099Z Last Updated: 2025-11-04T17:17:20.124Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: validate pppoe header Ensure there is sufficient room to access the protocol field of the PPPoe header. Validate it once before the flowtable lookup, then use a helper function to access protocol field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d06977b9a4109f8738bb276125eb6a0b772bc433 - https://git.kernel.org/stable/c/8bf7c76a2a207ca2b4cfda0a279192adf27678d7 - https://
b9a4109f8738bb276125eb6a0b772bc433 - https://git.kernel.org/stable/c/8bf7c76a2a207ca2b4cfda0a279192adf27678d7 - https://git.kernel.org/stable/c/a2471d271042ea18e8a6babc132a8716bb2f08b9 - https://git.kernel.org/stable/c/cf366ee3bc1b7d1c76a882640ba3b3f8f1039163 - https://git.kernel.org/stable/c/87b3593bed1868b2d9fe096c01bcdf0ea86cbebf
CVE ID: CVE-2024-27017 State: PUBLISHED Published: 2024-05-01T05:30:01.888Z Last Updated: 2025-11-04T17:17:24.217Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: walk over current view on netlink dump The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set. Based on patch from Florian Westphal. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ff89d
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ff89db14c63a827066446460e39226c0688ef786 - https://git.kernel.org/stable/c/ce9fef54c5ec9912a0c9a47bac3195cc41b14679 - https://git.kernel.org/stable/c/52735a010f37580b3a569a996f878fdd87425650 - https://git.kernel.org/stable/c/f24d8abc2bb8cbf31ec713336e402eafa8f42f60 - https://git.kernel.org/stable/c/721715655c72640567e8742567520c99801148ed - https://git.kernel.org/stable/c/29b359cf6d95fd60730533f7f10464e95bd17c73
CVE ID: CVE-2024-27018 State: PUBLISHED Published: 2024-05-01T05:30:06.472Z Last Updated: 2025-11-04T17:17:28.322Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: skip conntrack input hook for promisc packets For historical reasons, when bridge device is in promisc mode, packets that are directed to the taps follow bridge input hook path. This patch adds a workaround to reset conntrack for these packets. Jianbo Liu reports warning splats in their test infrastructure where cloned packets reach the br_netfilter input hook to confirm the conntrack object. Scratch one bit from BR_INPUT_SKB_CB to annotate tha
reach the br_netfilter input hook to confirm the conntrack object. Scratch one bit from BR_INPUT_SKB_CB to annotate that this packet has reached the input hook because it is passed up to the bridge device to reach the taps. [ 57.571874] WARNING: CPU: 1 PID: 0 at net/bridge/br_netfilter_hooks.c:616 br_nf_local_in+0x157/0x180 [br_netfilter] [ 57.572749] Modules linked in: xt_MASQUERADE nf_conntrack_netlink nfnetlink iptable_nat xt_addrtype xt_conntrack nf_nat br_netfilter rpcsec_gss_krb5 auth_rpcgss oid_registry overlay rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_isc si ib_umad rdma_cm ib_ipoib iw_cm ib_cm mlx5_ib ib_uverbs ib_core mlx5ctl mlx5_core [ 57.575158] CPU: 1 PID: 0 Comm: swapp
ib_umad rdma_cm ib_ipoib iw_cm ib_cm mlx5_ib ib_uverbs ib_core mlx5ctl mlx5_core [ 57.575158] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0+ #19 [ 57.575700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [ 57.576662] RIP: 0010:br_nf_local_in+0x157/0x180 [br_netfilter] [ 57.577195] Code: fe ff ff 41 bd 04 00 00 00 be 04 00 00 00 e9 4a ff ff ff be 04 00 00 00 48 89 ef e8 f3 a9 3c e1 66 83 ad b4 00 00 00 04 eb 91 <0f> 0b e9 f1 fe ff ff 0f 0b e9 df fe ff ff 48 89 df e8 b3 53 47 e1 [ 57.578722] RSP: 0018:ffff88885f845a08 EFLAGS: 00010202 [ 57.579207] RAX: 0000000000000002 RBX: ffff88812dfe8000 RCX: 0000000000000000 [ 57.579830]
8885f845a08 EFLAGS: 00010202 [ 57.579207] RAX: 0000000000000002 RBX: ffff88812dfe8000 RCX: 0000000000000000 [ 57.579830] RDX: ffff88885f845a60 RSI: ffff8881022dc300 RDI: 0000000000000000 [ 57.580454] RBP: ffff88885f845a60 R08: 0000000000000001 R09: 0000000000000003 [ 57.581076] R10: 00000000ffff1300 R11: 0000000000000002 R12: 0000000000000000 [ 57.581695] R13: ffff8881047ffe00 R14: ffff888108dbee00 R15: ffff88814519b800 [ 57.582313] FS: 0000000000000000(0000) GS:ffff88885f840000(0000) knlGS:0000000000000000 [ 57.583040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.583564] CR2: 000000c4206aa000 CR3: 0000000103847001 CR4: 0000000000370eb0 [ 57.584194] DR0: 0000000000000000 DR1: 000000
583564] CR2: 000000c4206aa000 CR3: 0000000103847001 CR4: 0000000000370eb0 [ 57.584194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.584820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.585440] Call Trace: [ 57.585721] <IRQ> [ 57.585976] ? __warn+0x7d/0x130 [ 57.586323] ? br_nf_local_in+0x157/0x180 [br_netfilter] [ 57.586811] ? report_bug+0xf1/0x1c0 [ 57.587177] ? handle_bug+0x3f/0x70 [ 57.587539] ? exc_invalid_op+0x13/0x60 [ 57.587929] ? asm_exc_invalid_op+0x16/0x20 [ 57.588336] ? br_nf_local_in+0x157/0x180 [br_netfilter] [ 57.588825] nf_hook_slow+0x3d/0xd0 [ 57.589188] ? br_handle_vlan+0x4b/0x110 [ 57.589579] br_pass_frame_up+0xfc/0x150 [
[ 57.588825] nf_hook_slow+0x3d/0xd0 [ 57.589188] ? br_handle_vlan+0x4b/0x110 [ 57.589579] br_pass_frame_up+0xfc/0x150 [ 57.589970] ? br_port_flags_change+0x40/0x40 [ 57.590396] br_handle_frame_finish+0x346/0x5e0 [ 57.590837] ? ipt_do_table+0x32e/0x430 [ 57.591221] ? br_handle_local_finish+0x20/0x20 [ 57.591656] br_nf_hook_thresh+0x4b/0xf0 [br_netfilter] [ 57.592286] ? br_handle_local_finish+0x20/0x20 [ 57.592802] br_nf_pre_routing_finish+0x178/0x480 [br_netfilter] [ 57.593348] ? br_handle_local_finish+0x20/0x20 [ 57.593782] ? nf_nat_ipv4_pre_routing+0x25/0x60 [nf_nat] [ 57.594279] br_nf_pre_routing+0x24c/0x550 [br_netfilter] [ 57.594780] ? br_nf_hook_thresh+0xf0/0xf0 [br_netfilter] [ 57.5952
594279] br_nf_pre_routing+0x24c/0x550 [br_netfilter] [ 57.594780] ? br_nf_hook_thresh+0xf0/0xf0 [br_netfilter] [ 57.595280] br_handle_frame+0x1f3/0x3d0 [ 57.595676] ? br_handle_local_finish+0x20/0x20 [ 57.596118] ? br_handle_frame_finish+0x5e0/0x5e0 [ 57.596566] __netif_receive_skb_core+0x25b/0xfc0 [ 57.597017] ? __napi_build_skb+0x37/0x40 [ 57.597418] __netif_receive_skb_list_core+0xfb/0x220 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/dceb683ab87ca3666a9bb5c0158528b646faedc4 - https://git.kernel.org/stable/c/b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6 - https://git.kernel.org/stable/c/3f59ac29dea0921637053908fe99268d
org/stable/c/b13db0d16bc7b2a52abcf5cb71334f63faa5dbd6 - https://git.kernel.org/stable/c/3f59ac29dea0921637053908fe99268d157bbb9d - https://git.kernel.org/stable/c/43193174510ea4f3ce09b796e559a2fd9f148615 - https://git.kernel.org/stable/c/751de2012eafa4d46d8081056761fa0e9cc8a178
CVE ID: CVE-2024-27019 State: PUBLISHED Published: 2024-05-01T05:30:11.319Z Last Updated: 2025-11-04T17:17:32.430Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in __nft_obj_type_get(). Therefore, there is potential data-race of nf_tables_objects list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_objects list in __nft_obj_type_get(), and use rcu_read_lock() in the caller nft_obj_type_get() to protect the ent
tables_objects list in __nft_obj_type_get(), and use rcu_read_lock() in the caller nft_obj_type_get() to protect the entire type query process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cade34279c2249eafe528564bd2e203e4ff15f88 - https://git.kernel.org/stable/c/379bf7257bc5f2a1b1ca8514e08a871b7bf6d920 - https://git.kernel.org/stable/c/df7c0fb8c2b9f9cac65659332581b19682a71349 - https://git.kernel.org/stable/c/ad333578f736d56920e090d7db1f8dec891d815e - https://git.kernel.org/stable/c/4ca946b19caf655a08d5e2266d4d5526025ebb73 - https://git.kernel.org/stable/c/d78d867dcea69c328db30df665be5be7d0148484
CVE ID: CVE-2024-27020 State: PUBLISHED Published: 2024-05-01T05:30:15.908Z Last Updated: 2025-11-04T17:17:36.550Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_tables_expressions list in __nft_expr_type_get(). Therefore, there is potential data-race of nf_tables_expressions list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_expressions list in __nft_expr_type_get(), and use rcu_read_lock() in the caller nft_expr_type_get()
ate over nf_tables_expressions list in __nft_expr_type_get(), and use rcu_read_lock() in the caller nft_expr_type_get() to protect the entire type query process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/939109c0a8e2a006a6cc8209e262d25065f4403a - https://git.kernel.org/stable/c/b38a133d37fa421c8447b383d788c9cc6f5cb34c - https://git.kernel.org/stable/c/934e66e231cff2b18faa2c8aad0b8cec13957e05 - https://git.kernel.org/stable/c/0b6de00206adbbfc6373b3ae38d2a6f197987907 - https://git.kernel.org/stable/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5 - https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b
e/c/8d56bad42ac4c43c6c72ddd6a654a2628bf839c5 - https://git.kernel.org/stable/c/a9ebf340d123ae12582210407f879d6a5a1bc25b - https://git.kernel.org/stable/c/01f1a678b05ade4b1248019c2dcca773aebbeb7f - https://git.kernel.org/stable/c/f969eb84ce482331a991079ab7a5c4dc3b7f89bf
CVE ID: CVE-2024-27021 State: PUBLISHED Published: 2024-05-01T05:30:21.242Z Last Updated: 2025-11-04T17:17:40.640Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: r8169: fix LED-related deadlock on module removal Binding devm_led_classdev_register() to the netdev is problematic because on module removal we get a RTNL-related deadlock. Fix this by avoiding the device-managed LED functions. Note: We can safely call led_classdev_unregister() for a LED even if registering it failed, because led_classdev_unregister() detects this and is a no-op in this case. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
) detects this and is a no-op in this case. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/53d986f39acd8ea11c9e460732bfa5add66360d9 - https://git.kernel.org/stable/c/19fa4f2a85d777a8052e869c1b892a2f7556569d
CVE ID: CVE-2024-27022 State: PUBLISHED Published: 2024-05-01T05:35:39.627Z Last Updated: 2025-11-04T17:17:44.767Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [1]. And the root cause is below race: CPU 1 CPU 2 fork hugetlbfs_fallocate dup_mmap hugetlbfs_punch_hole i_mmap_lock_write(mapping); vma_interval_tree_insert_after -- Child vma is visible through i_mmap tree. i_mmap_unlock_write(mapping); hugetlb_dup_vma_private -- Clear vma_lock outside i_mmap_rwsem! i_mmap_lock_write(mapping); hugetlb_vmdelete_list vma_interval_tree_foreach huget
- Clear vma_lock outside i_mmap_rwsem! i_mmap_lock_write(mapping); hugetlb_vmdelete_list vma_interval_tree_foreach hugetlb_vma_trylock_write -- Vma_lock is cleared. tmp->vm_ops->open -- Alloc new vma_lock outside i_mmap_rwsem! hugetlb_vma_unlock_write -- Vma_lock is assigned!!! i_mmap_unlock_write(mapping); hugetlb_dup_vma_private() and hugetlb_vm_op_open() are called outside i_mmap_rwsem lock while vma lock can be used in the same time. Fix this by deferring linking file vma until vma is fully initialized. Those vmas should be initialized first before they can be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/abdb88dd272bbeb93efe01d8e0b7b17e24af3a34 - https://git.kernel.org/stable/c/35e351780fa9d8240dd6f7e4f245f9ea37e96c19
CVE ID: CVE-2024-27023 State: PUBLISHED Published: 2024-05-01T12:49:21.063Z Last Updated: 2025-05-04T09:02:30.069Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: md: Fix missing release of 'active_io' for flush submit_flushes atomic_set(&mddev->flush_pending, 1); rdev_for_each_rcu(rdev, mddev) atomic_inc(&mddev->flush_pending); bi->bi_end_io = md_end_flush submit_bio(bi); /* flush io is done first */ md_end_flush if (atomic_dec_and_test(&mddev->flush_pending)) percpu_ref_put(&mddev->active_io) -> active_io is not released if (atomic_dec_and_test(&mddev->flush_pending)) -> missing release of active_io For consequence, mddev_susp
not released if (atomic_dec_and_test(&mddev->flush_pending)) -> missing release of active_io For consequence, mddev_suspend() will wait for 'active_io' to be zero forever. Fix this problem by releasing 'active_io' in submit_flushes() if 'flush_pending' is decreased to zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6b2ff10390b19a2364af622b6666b690443f9f3f - https://git.kernel.org/stable/c/02dad157ba11064d073f5499dc33552b227d5d3a - https://git.kernel.org/stable/c/11f81438927f84edfaaeb5d5f10856c3a1c1fc82 - https://git.kernel.org/stable/c/855678ed8534518e2b428bcbcec695de9ba248e8
CVE ID: CVE-2024-27024 State: PUBLISHED Published: 2024-05-01T12:49:24.696Z Last Updated: 2025-05-04T12:55:25.042Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/rds: fix WARNING in rds_conn_connect_if_down If connection isn't established yet, get_mr() will fail, trigger connection after get_mr(). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/786854141057751bc08eb26f1b02e97c1631c8f4 - https://git.kernel.org/stable/c/997efea2bf3a4adb96c306b9ad6a91442237bf5b - https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 - https://git.kerne
b96c306b9ad6a91442237bf5b - https://git.kernel.org/stable/c/9dfc15a10dfd44f8ff7f27488651cb5be6af83c2 - https://git.kernel.org/stable/c/b562ebe21ed9adcf42242797dd6cb75beef12bf0 - https://git.kernel.org/stable/c/998fd719e6d6468b930ac0c44552ea9ff8b07b80 - https://git.kernel.org/stable/c/2b505d05280739ce31d5708da840f42df827cb85 - https://git.kernel.org/stable/c/907761307469adecb02461a14120e9a1812a5fb1 - https://git.kernel.org/stable/c/c055fc00c07be1f0df7375ab0036cebd1106ed38
CVE ID: CVE-2024-27025 State: PUBLISHED Published: 2024-05-01T12:49:28.124Z Last Updated: 2025-05-04T09:02:32.761Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/44214d744be32a4769faebba764510888f1eb19e - https://git.kernel.org/stable/c/4af837db0fd3679fabc7b7758397090b0c06dced - https://git.kernel.org/stable/c/98e60b538e66c90b9a856828c71d4e975ebfa79
ble/c/4af837db0fd3679fabc7b7758397090b0c06dced - https://git.kernel.org/stable/c/98e60b538e66c90b9a856828c71d4e975ebfa797 - https://git.kernel.org/stable/c/96436365e5d80d0106ea785a4f80a58e7c9edff8 - https://git.kernel.org/stable/c/b7f5aed55829f376e4f7e5ea5b80ccdcb023e983 - https://git.kernel.org/stable/c/e803040b368d046434fbc8a91945c690332c4fcf - https://git.kernel.org/stable/c/ba6a9970ce9e284cbc04099361c58731e308596a - https://git.kernel.org/stable/c/31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6d
CVE ID: CVE-2024-27026 State: PUBLISHED Published: 2024-05-01T12:49:31.685Z Last Updated: 2025-05-04T09:02:34.376Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix missing reserved tailroom Use rbi->len instead of rcd->len for non-dataring packet. Found issue: XDP_WARN: xdp_update_frame_from_buff(line:278): Driver BUG: missing reserved tailroom WARNING: CPU: 0 PID: 0 at net/core/xdp.c:586 xdp_warn+0xf/0x20 CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W O 6.5.1 #1 RIP: 0010:xdp_warn+0xf/0x20 ... ? xdp_warn+0xf/0x20 xdp_do_redirect+0x15f/0x1c0 vmxnet3_run_xdp+0x17a/0x400 [vmxnet3] vmxnet3_process_xdp+0xe4/0x760 [vmxnet3] ?
rn+0xf/0x20 xdp_do_redirect+0x15f/0x1c0 vmxnet3_run_xdp+0x17a/0x400 [vmxnet3] vmxnet3_process_xdp+0xe4/0x760 [vmxnet3] ? vmxnet3_tq_tx_complete.isra.0+0x21e/0x2c0 [vmxnet3] vmxnet3_rq_rx_complete+0x7ad/0x1120 [vmxnet3] vmxnet3_poll_rx_only+0x2d/0xa0 [vmxnet3] __napi_poll+0x20/0x180 net_rx_action+0x177/0x390 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/aba8659caf88017507419feea06069f529329ea6 - https://git.kernel.org/stable/c/7c8505ecc2d15473d679b8e06335434b84fffe86 - https://git.kernel.org/stable/c/91d017d19d5a9ad153e2dc23ed3c0e2e79ef5262 - https://git.kernel.org/stable/c/e127ce7699c1e05279ee5ee61f00893e7bfa9671
CVE ID: CVE-2024-27027 State: PUBLISHED Published: 2024-05-01T12:49:35.130Z Last Updated: 2025-05-04T09:02:35.599Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: dpll: fix dpll_xa_ref_*_del() for multiple registrations Currently, if there are multiple registrations of the same pin on the same dpll device, following warnings are observed: WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230 WARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0 The problem is, that in both dpll_xa_ref_dpll_del() and dpll_xa_ref_pin_del() registration is only removed
r+0x2b3/0x2c0 The problem is, that in both dpll_xa_ref_dpll_del() and dpll_xa_ref_pin_del() registration is only removed from list in case the reference count drops to zero. That is wrong, the registration has to be removed always. To fix this, remove the registration from the list and free it unconditionally, instead of doing it only when the ref reference counter reaches zero. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/769324eb35143462542cdb15483cdaf4877bf661 - https://git.kernel.org/stable/c/b27e32e9367dac024cd6f61f22655714f483fd67 - https://git.kernel.org/stable/c/b446631f355ece73b13c311dd712c47381a23172
CVE ID: CVE-2024-27028 State: PUBLISHED Published: 2024-05-01T12:53:19.069Z Last Updated: 2025-05-04T09:02:37.127Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spi_transfer can be a NULL pointer, so the interrupt handler may end up writing to the invalid memory and cause crashes. Add a check to trans->tx_buf before using it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2342b05ec5342a519e00524a507f7a6ea6791a38 - https://git.kernel.org/stable/c/55f8ea6731aa64871ee6aef7dba53e
l.org/stable/c/2342b05ec5342a519e00524a507f7a6ea6791a38 - https://git.kernel.org/stable/c/55f8ea6731aa64871ee6aef7dba53ee9f9f3b2f6 - https://git.kernel.org/stable/c/bcfcdf19698024565eff427706ebbd8df65abd11 - https://git.kernel.org/stable/c/c10fed329c1c104f375a75ed97ea3abef0786d62 - https://git.kernel.org/stable/c/766ec94cc57492eab97cbbf1595bd516ab0cb0e4 - https://git.kernel.org/stable/c/62b1f837b15cf3ec2835724bdf8577e47d14c753 - https://git.kernel.org/stable/c/bea82355df9e1c299625405b1947fc9b26b4c6d4 - https://git.kernel.org/stable/c/1784053cf10a14c4ebd8a890bad5cfe1bee51713 - https://git.kernel.org/stable/c/a20ad45008a7c82f1184dc6dee280096009ece55
CVE ID: CVE-2024-27029 State: PUBLISHED Published: 2024-05-01T12:53:22.513Z Last Updated: 2025-05-04T09:02:38.758Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mmhub client id out-of-bounds access Properly handle cid 0x140. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e1e076bda4fd6378ae650f2c6ef1a4ff93c5aea5 - https://git.kernel.org/stable/c/1f24b3040f2b6ffcb97151fabb3070328254d923 - https://git.kernel.org/stable/c/6540ff6482c1a5a6890ae44b23d0852ba1986d9e
CVE ID: CVE-2024-27030 State: PUBLISHED Published: 2024-05-01T12:53:25.954Z Last Updated: 2025-05-04T09:02:40.056Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Use separate handlers for interrupts For PF to AF interrupt vector and VF to AF vector same interrupt handler is registered which is causing race condition. When two interrupts are raised to two CPUs at same time then two cores serve same event corrupting the data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/94cb17e5cf3a3c484063abc0ce4b8a2b2e8c1cb2 - https://git.kernel.org/stabl