Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-53399 State: PUBLISHED Published: 2025-09-18T13:33:39.575Z Last Updated: 2025-09-19T15:21:40.051Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() If share is , share->path is NULL and it cause NULL pointer dereference issue. References: - https://git.kernel.org/stable/c/227eb2689b44d0d60da3839b146983e73435924c - https://git.kernel.org/stable/c/a70751dd7b60eab025e97e19b6b2477c6eaf2bbb - https://git.kernel.org/stable/c/b35f6c031b87d9e51f141ff6de0ea59756a8e313 - https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b - https://git.ke
d9e51f141ff6de0ea59756a8e313 - https://git.kernel.org/stable/c/1636e09779f83e10e6ed57d91ef94abcefdd206b - https://git.kernel.org/stable/c/3ac00a2ab69b34189942afa9e862d5170cdcb018
CVE ID: CVE-2023-53400 State: PUBLISHED Published: 2025-09-18T13:33:40.338Z Last Updated: 2025-09-18T13:33:40.338Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix Oops by 9.1 surround channel names get_line_out_pfx() may trigger an Oops by overflowing the static array with more than 8 channels. This was reported for MacBookPro 12,1 with Cirrus codec. As a workaround, extend for the 9.1 channels and also fix the potential Oops by unifying the code paths accessing the same array with the proper size check. References: - https://git.kernel.org/stable/c/082dcd51667b29097500c824c37f24da997a6a8a - https://git.kernel.org
e check. References: - https://git.kernel.org/stable/c/082dcd51667b29097500c824c37f24da997a6a8a - https://git.kernel.org/stable/c/b5694aae4c2d9a288bafce7d38f122769e0428e6 - https://git.kernel.org/stable/c/4ef155ddf9578bf035964d58739fdcd7dd44b4a4 - https://git.kernel.org/stable/c/546b1f5f45a355ae0d3a8041cdaca597dfcac825 - https://git.kernel.org/stable/c/e8c7d7c43d5edd20e518fe1dfb2371d1fe6e8bb8 - https://git.kernel.org/stable/c/dc8c569d59f17b17d7bca4f68c36bd571659921e - https://git.kernel.org/stable/c/fcf637461019e9a5a0c12fc5c42a9db1779b0634 - https://git.kernel.org/stable/c/3b44ec8c5c44790a82f07e90db45643c762878c6
CVE ID: CVE-2023-53401 State: PUBLISHED Published: 2025-09-18T13:33:41.076Z Last Updated: 2025-09-18T13:33:41.076Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() KCSAN found an issue in obj_stock_flush_required(): stock->cached_objcg can be reset between the check and dereference: ================================================================== BUG: KCSAN: data-race in drain_all_stock / drain_obj_stock write to 0xffff888237c2a2f8 of 8 bytes by task 19625 on cpu 0: drain_obj_stock+0x408/0x4e0 mm/memcontrol.c:3306 refill_obj_stock+0x9c/0x1e0 mm/memcontrol.c:
es by task 19625 on cpu 0: drain_obj_stock+0x408/0x4e0 mm/memcontrol.c:3306 refill_obj_stock+0x9c/0x1e0 mm/memcontrol.c:3340 obj_cgroup_uncharge+0xe/0x10 mm/memcontrol.c:3408 memcg_slab_free_hook mm/slab.h:587 [inline] __cache_free mm/slab.c:3373 [inline] __do_kmem_cache_free mm/slab.c:3577 [inline] kmem_cache_free+0x105/0x280 mm/slab.c:3602 __d_free fs/dcache.c:298 [inline] dentry_free fs/dcache.c:375 [inline] __dentry_kill+0x422/0x4a0 fs/dcache.c:621 dentry_kill+0x8d/0x1e0 dput+0x118/0x1f0 fs/dcache.c:913 __fput+0x3bf/0x570 fs/file_table.c:329 ____fput+0x15/0x20 fs/file_table.c:349 task_work_run+0x123/0x160 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [i
able.c:349 task_work_run+0x123/0x160 kernel/task_work.c:179 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] exit_to_user_mode_loop+0xcf/0xe0 kernel/entry/common.c:171 exit_to_user_mode_prepare+0x6a/0xa0 kernel/entry/common.c:203 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline] syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:296 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd read to 0xffff888237c2a2f8 of 8 bytes by task 19632 on cpu 1: obj_stock_flush_required mm/memcontrol.c:3319 [inline] drain_all_stock+0x174/0x2a0 mm/memcontrol.c:2361 try_charge_memcg+0x6d0/0xd10 mm/memcontrol.c:2703 try_charge mm
inline] drain_all_stock+0x174/0x2a0 mm/memcontrol.c:2361 try_charge_memcg+0x6d0/0xd10 mm/memcontrol.c:2703 try_charge mm/memcontrol.c:2837 [inline] mem_cgroup_charge_skmem+0x51/0x140 mm/memcontrol.c:7290 sock_reserve_memory+0xb1/0x390 net/core/sock.c:1025 sk_setsockopt+0x800/0x1e70 net/core/sock.c:1525 udp_lib_setsockopt+0x99/0x6c0 net/ipv4/udp.c:2692 udp_setsockopt+0x73/0xa0 net/ipv4/udp.c:2817 sock_common_setsockopt+0x61/0x70 net/core/sock.c:3668 __sys_setsockopt+0x1c3/0x230 net/socket.c:2271 __do_sys_setsockopt net/socket.c:2282 [inline] __se_sys_setsockopt net/socket.c:2279 [inline] __x64_sys_setsockopt+0x66/0x80 net/socket.c:2279 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_sys
2279 [inline] __x64_sys_setsockopt+0x66/0x80 net/socket.c:2279 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0xffff8881382d52c0 -> 0xffff888138893740 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 19632 Comm: syz-executor.0 Not tainted 6.3.0-rc2-syzkaller-00387-g534293368afa #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 Fix it by using READ_ONCE()/WRITE_ONCE() for all accesses to stock->cached_objcg. References: - https://git.kernel.org/stable/c/33d9490b27e5d8da4444aefd714a4f50189db978 - https://git.kernel.org/stable/c/33391c
ces: - https://git.kernel.org/stable/c/33d9490b27e5d8da4444aefd714a4f50189db978 - https://git.kernel.org/stable/c/33391c7e1a2ad612bf3922cc168cb09a46bbe236 - https://git.kernel.org/stable/c/3b8abb3239530c423c0b97e42af7f7e856e1ee96
CVE ID: CVE-2023-53402 State: PUBLISHED Published: 2025-09-18T13:58:42.207Z Last Updated: 2025-09-18T13:58:42.207Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/2e07fa2e30d48d24a791483774a3d4b76769e0cf - https://git.kernel.org/stable/c/c578a68ffcdc2e8c72556bebdaae2b7500398e81 - https://git.kernel
a791483774a3d4b76769e0cf - https://git.kernel.org/stable/c/c578a68ffcdc2e8c72556bebdaae2b7500398e81 - https://git.kernel.org/stable/c/13969236b6900b5a3625ad2193569588e978f1cc - https://git.kernel.org/stable/c/55bf243c514553e907efcf2bda92ba090eca8c64
CVE ID: CVE-2023-53403 State: PUBLISHED Published: 2025-09-18T13:58:43.032Z Last Updated: 2025-09-18T13:58:43.032Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: time/debug: Fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/dc39fbd865a9819db4b622f610ba17b2ebc294f4 - https://git.kernel.org/stable/c/15cffd01ed80e3506e29ba9f441e2358413b7317 - https://git.kernel.org/stable
a17b2ebc294f4 - https://git.kernel.org/stable/c/15cffd01ed80e3506e29ba9f441e2358413b7317 - https://git.kernel.org/stable/c/b588b42d077ce93c98704b41003bcec6a564b738 - https://git.kernel.org/stable/c/5b268d8abaec6cbd4bd70d062e769098d96670aa
CVE ID: CVE-2023-53404 State: PUBLISHED Published: 2025-09-18T13:58:43.702Z Last Updated: 2025-09-18T13:58:43.702Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: fotg210: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/4a71b15744b8f286718722f80b663c06ed909d8a - https://git.kernel.org/stable/c/7d2d3bef6d700eb4261fb6761de2c95a9e3c0ac8 - https://git.kernel.org/stab
b663c06ed909d8a - https://git.kernel.org/stable/c/7d2d3bef6d700eb4261fb6761de2c95a9e3c0ac8 - https://git.kernel.org/stable/c/55c2ffc534928f4732199617e3b746d79a57898f - https://git.kernel.org/stable/c/6b4040f452037a7e95472577891d57c6b18c89c5
CVE ID: CVE-2023-53405 State: PUBLISHED Published: 2025-09-18T13:58:44.401Z Last Updated: 2025-09-18T13:58:44.401Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/30f9ba2396a1130eef7f2d3ee7ee8037b7c25be9 - https://git.kernel.org/stable/c/be21a66e17ee0ab5f3513b6c86659e60cec5e981 - https://git.kernel.o
7f2d3ee7ee8037b7c25be9 - https://git.kernel.org/stable/c/be21a66e17ee0ab5f3513b6c86659e60cec5e981 - https://git.kernel.org/stable/c/0933eca15f5223b5c2412080c8c3de8758465c78 - https://git.kernel.org/stable/c/73f4451368663ad28daa67980c6dd11d83b303eb
CVE ID: CVE-2023-53406 State: PUBLISHED Published: 2025-09-18T13:58:45.179Z Last Updated: 2025-09-18T13:58:45.179Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/6236a6d2cdfb710bd8a82c4b179d0a034d0d99cb - https://git.kernel.org/stable/c/78d9586d8e728be1e360d3d0da7170c791d1d55e - https://git.kern
0bd8a82c4b179d0a034d0d99cb - https://git.kernel.org/stable/c/78d9586d8e728be1e360d3d0da7170c791d1d55e - https://git.kernel.org/stable/c/8d48a7887dbca22e064c20caf20ae7949019fe9b - https://git.kernel.org/stable/c/7a038a681b7df78362d9fc7013e5395a694a9d3a
CVE ID: CVE-2023-53407 State: PUBLISHED Published: 2025-09-18T13:58:45.968Z Last Updated: 2025-09-18T13:58:45.968Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/8da78a60f3323ce7aac589d49fb82f71a04bc835 - https://git.kernel.org/stable/c/b14d188d0d0b86e2180525aefd570dbb6ebd6aa9 - https://git.kern
e7aac589d49fb82f71a04bc835 - https://git.kernel.org/stable/c/b14d188d0d0b86e2180525aefd570dbb6ebd6aa9 - https://git.kernel.org/stable/c/67c931a3f2f061bf457995fd21fff114325e0c30 - https://git.kernel.org/stable/c/7a6952fa0366d4408eb8695af1a0578c39ec718a
CVE ID: CVE-2023-53408 State: PUBLISHED Published: 2025-09-18T13:58:46.767Z Last Updated: 2025-09-18T13:58:46.767Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: trace/blktrace: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/a2e4b48d6f9b39aa19bafe223f9dd436a692fc80 - https://git.kernel.org/stable/c/3036f5f5ae5210797d95446795df01c1249af9ad - https://git.kernel.org/st
23f9dd436a692fc80 - https://git.kernel.org/stable/c/3036f5f5ae5210797d95446795df01c1249af9ad - https://git.kernel.org/stable/c/5286b72fb425291af5f4ca7285d73c16a08d8691 - https://git.kernel.org/stable/c/83e8864fee26f63a7435e941b7c36a20fd6fe93e
CVE ID: CVE-2023-53409 State: PUBLISHED Published: 2025-09-18T13:58:47.478Z Last Updated: 2025-09-18T13:58:47.478Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drivers: base: component: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/09709a49283f79184c998d6dafcc01590e4d654d - https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950 - https://git.ker
9184c998d6dafcc01590e4d654d - https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950 - https://git.kernel.org/stable/c/bf0fd01c7cc1061fb2cfda3e2044371642108e6c - https://git.kernel.org/stable/c/8deb87b1e810dd558371e88ffd44339fbef27870
CVE ID: CVE-2023-53410 State: PUBLISHED Published: 2025-09-18T13:58:48.146Z Last Updated: 2025-09-18T13:58:48.146Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: ULPI: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/dcbe69f4f743a938344b32e60531ea55355e0c08 - https://git.kernel.org/stable/c/2b8aa879e28df11e45855b04788050c61fb6b02a - https://git.kernel.org/stable/
ea55355e0c08 - https://git.kernel.org/stable/c/2b8aa879e28df11e45855b04788050c61fb6b02a - https://git.kernel.org/stable/c/8f4d25eba599c4bd4b5ea8ae8752cda480a9d563
CVE ID: CVE-2023-53411 State: PUBLISHED Published: 2025-09-18T13:58:48.964Z Last Updated: 2025-09-29T10:47:38.165Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: PM: EM: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/e974e8f1e37d22c0de07374f8ddc84073fef2f1d - https://git.kernel.org/stable/c/84e4d4885d0ae011860fb599d50d01b8fdca2b87 - https://git.kernel.org/stable/c/5
73fef2f1d - https://git.kernel.org/stable/c/84e4d4885d0ae011860fb599d50d01b8fdca2b87 - https://git.kernel.org/stable/c/5100c4efc30636aa48ac517dece3c3b7f84fe367 - https://git.kernel.org/stable/c/30fee10192e1239478a0987bc7ee445d5e980d46 - https://git.kernel.org/stable/c/a0e8c13ccd6a9a636d27353da62c2410c4eca337
CVE ID: CVE-2023-53412 State: PUBLISHED Published: 2025-09-18T13:58:49.646Z Last Updated: 2025-09-18T13:58:49.646Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/b0a2663ecbe8f65cd3bab2b34dd90156ceb0dbb8 - https://git.kernel.org/stable/c/31de0b70ae5661a407e9d578bbc41de2d83ac25d - https://git.ker
65cd3bab2b34dd90156ceb0dbb8 - https://git.kernel.org/stable/c/31de0b70ae5661a407e9d578bbc41de2d83ac25d - https://git.kernel.org/stable/c/f30c7046dfa2748520a8045bb43ed2fbca0373b5 - https://git.kernel.org/stable/c/a91c99b1fe5c6f7e52fb932ad9e57ec7cfe913ec
CVE ID: CVE-2023-53413 State: PUBLISHED Published: 2025-09-18T13:58:50.363Z Last Updated: 2025-09-18T13:58:50.363Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: isp116x: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/6f12097467ea1ef57f29dd29c1d082e4752cef37 - https://git.kernel.org/stable/c/542a99cd6eadfb543bf190431c3fb520f3da0bbc - https://git.kernel.org/stab
1d082e4752cef37 - https://git.kernel.org/stable/c/542a99cd6eadfb543bf190431c3fb520f3da0bbc - https://git.kernel.org/stable/c/a60b4902a626dda08a31d9cf89ccce11bef8dd33 - https://git.kernel.org/stable/c/a95f62d5813facbec20ec087472eb313ee5fa8af
CVE ID: CVE-2023-53414 State: PUBLISHED Published: 2025-09-18T13:58:51.063Z Last Updated: 2025-09-18T13:58:51.063Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/5a46d8bdaf03e8a4bb83f0c363326d9aa66cc122 - https://git.kernel.org/stable/c/3dec769caf337c55814fbf79ec8c91a3cce23bf3 - https://git.kernel.org/stable
26d9aa66cc122 - https://git.kernel.org/stable/c/3dec769caf337c55814fbf79ec8c91a3cce23bf3 - https://git.kernel.org/stable/c/995424f59ab52fb432b26ccb3abced63745ea041 - https://git.kernel.org/stable/c/ad0e4e2fab928477f74d742e6e77d79245d3d3e7
CVE ID: CVE-2023-53415 State: PUBLISHED Published: 2025-09-18T13:58:51.771Z Last Updated: 2025-09-18T13:58:51.771Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: dwc3: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Note, the root dentry for the debugfs directory for the device needs to be saved so we don't have to keep looking it up, which required a bit more refactoring to properly create and remove it wh
saved so we don't have to keep looking it up, which required a bit more refactoring to properly create and remove it when needed. References: - https://git.kernel.org/stable/c/cf52c320cf74245ce1c12b0bd48f77b87d77fbc9 - https://git.kernel.org/stable/c/ce234af49d103d95e3fdca59b25e0d0242f41bb4 - https://git.kernel.org/stable/c/bab872b638130a18fd54d9adfad7db77ed6457be - https://git.kernel.org/stable/c/be308d68785b205e483b3a0c61ba3a82da468f2c
CVE ID: CVE-2023-53416 State: PUBLISHED Published: 2025-09-18T13:58:52.578Z Last Updated: 2025-09-18T13:58:52.578Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: isp1362: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/fb284bee1e213c94be9131d1aca7c16bd6ba259d - https://git.kernel.org/stable/c/b0a8195a84a725ca7936c213b5e056d2a3ab2a94 - https://git.kernel.org/stab
ca7c16bd6ba259d - https://git.kernel.org/stable/c/b0a8195a84a725ca7936c213b5e056d2a3ab2a94 - https://git.kernel.org/stable/c/9d537c35e48feba9d450acca0ff14a55ce1ec450 - https://git.kernel.org/stable/c/c26e682afc14caa87d44beed271eec8991e93c65
CVE ID: CVE-2023-53417 State: PUBLISHED Published: 2025-09-18T13:58:53.286Z Last Updated: 2025-09-18T13:58:53.286Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: sl811: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/bb4d5eefb67095d7c3b70b08498b23b7f2895f76 - https://git.kernel.org/stable/c/54166af8941d0cf46b65cfa2fbce76e38d82fadf - https://git.kernel.org/stable
b23b7f2895f76 - https://git.kernel.org/stable/c/54166af8941d0cf46b65cfa2fbce76e38d82fadf - https://git.kernel.org/stable/c/04fdfec7b0286972cb5457ef958c92585447a39f - https://git.kernel.org/stable/c/e1523c4dbc54e164638ff8729d511cf91e27be04
CVE ID: CVE-2023-53418 State: PUBLISHED Published: 2025-09-18T13:58:54.007Z Last Updated: 2025-09-18T13:58:54.007Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. References: - https://git.kernel.org/stable/c/036ada6ca9eea926abc0b0ef550b10488d66d4d8 - https://git.kernel.org/stable/c/7a5fdd8660174a8056de57d1fdce3a7e9f77f60e - https://git.ker
926abc0b0ef550b10488d66d4d8 - https://git.kernel.org/stable/c/7a5fdd8660174a8056de57d1fdce3a7e9f77f60e - https://git.kernel.org/stable/c/72c25eb9ae4993ccac4821354ff34eb1f32e4781 - https://git.kernel.org/stable/c/e3965acaf3739fde9d74ad82979b46d37c6c208f
CVE ID: CVE-2023-53419 State: PUBLISHED Published: 2025-09-18T16:04:02.955Z Last Updated: 2025-09-18T16:04:02.955Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access For kernels built with CONFIG_PREEMPT_RCU=y, the following scenario can result in a NULL-pointer dereference: CPU1 CPU2 rcu_preempt_deferred_qs_irqrestore rcu_print_task_exp_stall if (special.b.blocked) READ_ONCE(rnp->exp_tasks) != NULL raw_spin_lock_rcu_node np = rcu_next_node_entry(t, rnp) if (&t->rcu_node_entry == rnp->exp_tasks) WRITE_ONCE(rnp->exp_tasks, np) .... raw_spin_unlock_irqrestore_rcu_node raw_spi
f (&t->rcu_node_entry == rnp->exp_tasks) WRITE_ONCE(rnp->exp_tasks, np) .... raw_spin_unlock_irqrestore_rcu_node raw_spin_lock_irqsave_rcu_node t = list_entry(rnp->exp_tasks->prev, struct task_struct, rcu_node_entry) (if rnp->exp_tasks is NULL, this will dereference a NULL pointer) The problem is that CPU2 accesses the rcu_node structure's->exp_tasks field without holding the rcu_node structure's ->lock and CPU2 did not observe CPU1's change to rcu_node structure's ->exp_tasks in time. Therefore, if CPU1 sets rcu_node structure's->exp_tasks pointer to NULL, then CPU2 might dereference that NULL pointer. This commit therefore holds the rcu_node structure's ->lock while accessing that structur
dereference that NULL pointer. This commit therefore holds the rcu_node structure's ->lock while accessing that structure's->exp_tasks field. [ paulmck: Apply Frederic Weisbecker feedback. ] References: - https://git.kernel.org/stable/c/a7d21b8585894e6fff973f6ddae42f02b13f600f - https://git.kernel.org/stable/c/e30a55e98ae6c44253d8b129efefd5da5bc6e3bc - https://git.kernel.org/stable/c/d0a8c0e31a09ec1efd53079083e2a677956b4d91 - https://git.kernel.org/stable/c/2bc0ae94ef1f9ed322d8ee439de3239ea3632ab2 - https://git.kernel.org/stable/c/3c1566bca3f8349f12b75d0a2d5e4a20ad6262ec