Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
incorrectly, indicates the that surface is mapped even when no surface is present. That's because after unreferencing the surface it's perfectly possible for the plane to be backed by a bo instead of a surface. Reset the surface mapped flag when unreferencing the plane state surface to fix null derefs in cleanup. Fixes crashes in KDE KWin 6.0 on Wayland: Oops: 0000 [#1] PREEMPT SMP PTI CPU: 4 PID: 2533 Comm: kwin_wayland Not tainted 6.7.0-rc3-vmwgfx #2 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020 RIP: 0010:vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] Code: 00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc cc 48 8b b3 a8 00 00 0
u_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] Code: 00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc cc 48 8b b3 a8 00 00 00 48 c7 c7 99 90 43 c0 e8 93 c5 db ca 48 8b 83 a8 00 00 00 <48> 8b 78 28 e8 e3 f> RSP: 0018:ffffb6b98216fa80 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff969d84cdcb00 RCX: 0000000000000027 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff969e75f21600 RBP: ffff969d4143dc50 R08: 0000000000000000 R09: ffffb6b98216f920 R10: 0000000000000003 R11: ffff969e7feb3b10 R12: 0000000000000000 R13: 0000000000000000 R14: 000000000000027b R15: ffff969d49c9fc00 FS: 00007f1e8f1b4180(0000) GS:ffff969e75f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
00007f1e8f1b4180(0000) GS:ffff969e75f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000028 CR3: 0000000104006004 CR4: 00000000003706f0 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x171/0x4e0 ? exc_page_fault+0x7f/0x180 ? asm_exc_page_fault+0x26/0x30 ? vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] drm_atomic_helper_cleanup_planes+0x9b/0xc0 commit_tail+0xd1/0x130 drm_atomic_helper_commit+0x11a/0x140 drm_atomic_commit+0x97/0xd0 ? __pfx___drm_printfn_info+0x10/0x10 drm_atomic_helper_update_plane+0xf5/0x160 drm_mode_cursor_universal+0x10e/0x270 drm_mode_cursor_common+0x102/0x230 ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 drm_ioctl
_mode_cursor_universal+0x10e/0x270 drm_mode_cursor_common+0x102/0x230 ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 drm_ioctl_kernel+0xb2/0x110 drm_ioctl+0x26d/0x4b0 ? __pfx_drm_mode_cursor2_ioctl+0x10/0x10 ? __pfx_drm_ioctl+0x10/0x10 vmw_generic_ioctl+0xa4/0x110 [vmwgfx] __x64_sys_ioctl+0x94/0xd0 do_syscall_64+0x61/0xe0 ? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40 ? do_syscall_64+0x70/0xe0 ? __x64_sys_ioctl+0xaf/0xd0 ? syscall_exit_to_user_mode+0x2b/0x40 ? do_syscall_64+0x70/0xe0 ? exc_page_fault+0x7f/0x180 entry_SYSCALL_64_after_hwframe+0x6e/0x76 RIP: 0033:0x7f1e93f279ed Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89
:0x7f1e93f279ed Code: 04 25 28 00 00 00 48 89 45 c8 31 c0 48 8d 45 10 c7 45 b0 10 00 00 00 48 89 45 b8 48 8d 45 d0 48 89 45 c0 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff f> RSP: 002b:00007ffca0faf600 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 000055db876ed2c0 RCX: 00007f1e93f279ed RDX: 00007ffca0faf6c0 RSI: 00000000c02464bb RDI: 0000000000000015 RBP: 00007ffca0faf650 R08: 000055db87184010 R09: 0000000000000007 R10: 000055db886471a0 R11: 0000000000000246 R12: 00007ffca0faf6c0 R13: 00000000c02464bb R14: 0000000000000015 R15: 00007ffca0faf790 </TASK> Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nf
Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_ine> CR2: 0000000000000028 ---[ end trace 0000000000000000 ]--- RIP: 0010:vmw_du_cursor_plane_cleanup_fb+0x124/0x140 [vmwgfx] Code: 00 00 00 75 3a 48 83 c4 10 5b 5d c3 cc cc cc cc 48 8b b3 a8 00 00 00 48 c7 c7 99 90 43 c0 e8 93 c5 db ca 48 8b 83 a8 00 00 00 <48> 8b 78 28 e8 e3 f> RSP: 0018:ffffb6b98216fa80 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff969d84cdcb00 RCX: 0000000000000027 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff969e75f21600 RBP: ffff969d4143 ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
0001 RDI: ffff969e75f21600 RBP: ffff969d4143 ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0a23f95af7f28dae7c0f7c82578ca5e1a239d461 - https://git.kernel.org/stable/c/105f72cc48c4c93f4578fcc61e06276471858e92 - https://git.kernel.org/stable/c/75baad63c033b3b900d822bffbc96c9d3649bc75 - https://git.kernel.org/stable/c/27571c64f1855881753e6f33c3186573afbab7ba
CVE ID: CVE-2023-52649 State: PUBLISHED Published: 2024-05-01T12:53:08.534Z Last Updated: 2025-05-04T07:40:51.283Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Avoid reading beyond LUT array When the floor LUT index (drm_fixp2int(lut_index) is the last index of the array the ceil LUT index will point to an entry beyond the array. Make sure we guard against it and use the value of the floor LUT index. v3: - Drop bits from commit description that didn't contribute anything of value Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9556c167673057d4
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9556c167673057d48ce4a0da675026fe046654c1 - https://git.kernel.org/stable/c/046c1184ce60b0a37d48134f17ddbc1f32ce02bd - https://git.kernel.org/stable/c/92800aaeff51b8358d1e0a7eb74daf8aa2d7ce9d - https://git.kernel.org/stable/c/2fee84030d12d9fddfa874e4562d71761a129277
CVE ID: CVE-2023-52650 State: PUBLISHED Published: 2024-05-01T12:53:12.145Z Last Updated: 2025-05-04T07:40:52.466Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/tegra: dsi: Add missing check for of_find_device_by_node Add check for the return value of of_find_device_by_node() and return the error if it fails in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/47a13d0b9d8527518639ab5c39667f69d6203e80 - https://git.kernel.org/stable/c/f05631a8525c3b5e5994ecb1304d2d878956c0f5 - https://git.kernel.org/stable/c/9200
203e80 - https://git.kernel.org/stable/c/f05631a8525c3b5e5994ecb1304d2d878956c0f5 - https://git.kernel.org/stable/c/92003981a6df5dc84af8a5904f8ee112fa324129 - https://git.kernel.org/stable/c/93128052bf832359531c3c0a9e3567b2b8682a2d - https://git.kernel.org/stable/c/50c0ad785a780c72a2fdaba10b38c645ffb4eae6 - https://git.kernel.org/stable/c/52aa507148c4aad41436e2005d742ffcafad9976 - https://git.kernel.org/stable/c/c5d2342d24ef6e08fc90a529fe3dc59de421a2b9 - https://git.kernel.org/stable/c/3169eaf1365541fd8e521091010c44fbe14691fc - https://git.kernel.org/stable/c/afe6fcb9775882230cd29b529203eabd5d2a638d
CVE ID: CVE-2023-52651 State: REJECTED Published: 2024-05-01T12:53:15.604Z Last Updated: 2024-05-02T10:07:14.570Z Description: No description available.
CVE ID: CVE-2023-52652 State: PUBLISHED Published: 2024-05-01T13:03:58.575Z Last Updated: 2025-05-04T07:40:53.901Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntb_register_device() If device_register() fails in ntb_register_device(), the device name allocated by dev_set_name() should be freed. As per the comment in device_register(), callers should use put_device() to give up the reference in the error path. So fix this by calling put_device() in the error path so that the name can be freed in kobject_cleanup(). As a result of this, put_device() in the error path of ntb_register_device() is rem
e can be freed in kobject_cleanup(). As a result of this, put_device() in the error path of ntb_register_device() is removed and the actual error is returned. [mani: reworded commit message] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a62b9f3d7bbfac874cc0c638bc1776dcf1f8ec06 - https://git.kernel.org/stable/c/6632a54ac8057cc0b0d789c6f73883e871bcd25c - https://git.kernel.org/stable/c/a039690d323221eb5865f1f31db3ec264e7a14b6 - https://git.kernel.org/stable/c/e8025439ef8e16029dc313d78a351ef192469b7b - https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04 - https://git.kernel.org/stable/c/aebfdfe39b93
https://git.kernel.org/stable/c/913421f9f7fd8324dcc41753d0f28b52e177ef04 - https://git.kernel.org/stable/c/aebfdfe39b9327a3077d0df8db3beb3160c9bdd0
CVE ID: CVE-2023-52653 State: PUBLISHED Published: 2024-05-01T13:04:02.055Z Last Updated: 2025-05-04T07:40:55.260Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The ctx->mech_used.data allocated by kmemdup is not freed in neither gss_import_v2_context nor it only caller gss_krb5_import_sec_context, which frees ctx on error. Thus, this patch reform the last call of gss_import_v2_context to the gss_krb5_import_ctx_v2, preventing the memleak while keepping the return formation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kerne
n formation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/99044c01ed5329e73651c054d8a4baacdbb1a27c - https://git.kernel.org/stable/c/47ac11db93e74ac49cd6c3fc69bcbc5964c4a8b4 - https://git.kernel.org/stable/c/d111e30d9cd846bb368faf3637dc0f71fcbcf822 - https://git.kernel.org/stable/c/e67b652d8e8591d3b1e569dbcdfcee15993e91fa
CVE ID: CVE-2023-52654 State: PUBLISHED Published: 2024-05-09T16:37:04.293Z Last Updated: 2025-05-04T12:49:22.099Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: io_uring/af_unix: disable sending io_uring over sockets File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary. Additional Analyst Notes: - CISA
g registered files and thus rendering SCM accounting on the io_uring side unnecessary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/18824f592aad4124d79751bbc1500ea86ac3ff29 - https://git.kernel.org/stable/c/3fe1ea5f921bf5b71cbfdc4469fb96c05936610e - https://git.kernel.org/stable/c/bcedd497b3b4a0be56f3adf7c7542720eced0792 - https://git.kernel.org/stable/c/f2f57f51b53be153a522300454ddb3887722fb2c - https://git.kernel.org/stable/c/5a33d385eb36991a91e3dddb189d8679e2aac2be - https://git.kernel.org/stable/c/705318a99a138c29a512a72c3e0043b3cd7f55f4
CVE ID: CVE-2023-52655 State: PUBLISHED Published: 2024-05-13T10:20:01.160Z Last Updated: 2025-05-04T07:40:57.728Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: check packet for fixup for true limit If a device sends a packet that is inbetween 0 and sizeof(u64) the value passed to skb_trim() as length will wrap around ending up as some very large value. The driver will then proceed to parse the header located at that position, which will either oops or process some random value. The fix is to check against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the dr
ck against sizeof(u64) rather than 0, which the driver currently does. The issue exists since the introduction of the driver. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/84f2e5b3e70f08fce3cb1ff73414631c5e490204 - https://git.kernel.org/stable/c/d69581c17608d81824dd497d9a54b6a5b6139975 - https://git.kernel.org/stable/c/46412b2fb1f9cc895d6d4036bf24f640b5d86dab - https://git.kernel.org/stable/c/82c386d73689a45d5ee8c1290827bce64056dddd - https://git.kernel.org/stable/c/2ebf775f0541ae0d474836fa0cf3220e502f8e3e - https://git.kernel.org/stable/c/ccab434e674ca95d483788b1895a70c21b7f016a
CVE ID: CVE-2023-52656 State: PUBLISHED Published: 2024-05-13T13:12:35.333Z Last Updated: 2025-08-21T12:08:49.536Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: io_uring: drop any code related to SCM_RIGHTS This is dead code after we dropped support for passing io_uring fds over SCM_RIGHTS, get rid of it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/cfb24022bb2c31f1f555dc6bc3cc5e2547446fb3 - https://git.kernel.org/stable/c/a6771f343af90a25f3a14911634562bb5621df02 - https://git.kernel.org/stable/c/d909d381c3152393421403be4b6435f17a2378b4 - https://git.
f90a25f3a14911634562bb5621df02 - https://git.kernel.org/stable/c/d909d381c3152393421403be4b6435f17a2378b4 - https://git.kernel.org/stable/c/a3812a47a32022ca76bf46ddacdd823dc2aabf8b - https://git.kernel.org/stable/c/6fc19b3d8a45ff0e5d50ec8184cee1d5eac1a8ba - https://git.kernel.org/stable/c/88c49d9c896143cdc0f77197c4dcf24140375e89 - https://git.kernel.org/stable/c/6e5e6d274956305f1fc0340522b38f5f5be74bdb
CVE ID: CVE-2023-52657 State: PUBLISHED Published: 2024-05-17T11:50:32.685Z Last Updated: 2025-05-04T12:49:23.336Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/pm: resolve reboot exception for si oland" This reverts commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. This causes hangs on SI when DC is enabled and errors on driver reboot and power off cycles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2e443ed55fe3ffb08327b331a9f45e9382413c94 - https://git.kernel.org/stable/c/baac292852c0e347626fb5436916947188e5838f - https://git.kernel.
327b331a9f45e9382413c94 - https://git.kernel.org/stable/c/baac292852c0e347626fb5436916947188e5838f - https://git.kernel.org/stable/c/c51468ac328d3922747be55507c117e47da813e6 - https://git.kernel.org/stable/c/955558030954b9637b41c97b730f9b38c92ac488
CVE ID: CVE-2023-52658 State: PUBLISHED Published: 2024-05-17T12:01:24.220Z Last Updated: 2025-05-04T12:49:24.589Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" This reverts commit 662404b24a4c4d839839ed25e3097571f5938b9b. The revert is required due to the suspicion it is not good for anything and cause crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3fba8eab2cfc7334e0f132d29dfd2552f2f2a579 - https://git.kernel.org/stable/c/1bcdd66d33edb446903132456c948f0b764ef2f9 - https://git
cfc7334e0f132d29dfd2552f2f2a579 - https://git.kernel.org/stable/c/1bcdd66d33edb446903132456c948f0b764ef2f9 - https://git.kernel.org/stable/c/8deeefb24786ea7950b37bde4516b286c877db00
CVE ID: CVE-2023-52659 State: PUBLISHED Published: 2024-05-17T12:08:36.098Z Last Updated: 2025-05-04T07:41:02.699Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type On 64-bit platforms, the pfn_to_kaddr() macro requires that the input value is 64 bits in order to ensure that valid address bits don't get lost when shifting that input by PAGE_SHIFT to calculate the physical address to provide a virtual address for. One such example is in pvalidate_pages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field,
ages() (used by SEV-SNP guests), where the GFN in the struct used for page-state change requests is a 40-bit bit-field, so attempts to pass this GFN field directly into pfn_to_kaddr() ends up causing guest crashes when dealing with addresses above the 1TB range due to the above. Fix this issue with SEV-SNP guests, as well as any similar cases that might cause issues in current/future code, by using an inline function, instead of a macro, so that the input is implicitly cast to the expected 64-bit input type prior to performing the shift operation. While it might be argued that the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this,
hat the issue is on the caller side, other archs/macros have taken similar approaches to deal with instances like this, such as ARM explicitly casting the input to phys_addr_t: e48866647b48 ("ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()") A C inline function is even better though. [ mingo: Refined the changelog some more & added __always_inline. ] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce - https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e - https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f - https://git.kernel.org/stable/c/8
b2b58e64e - https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f - https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea
CVE ID: CVE-2023-52660 State: PUBLISHED Published: 2024-05-17T12:08:39.897Z Last Updated: 2025-05-04T07:41:04.176Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ handling due to shared interrupts The driver requests the interrupts as IRQF_SHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will hang as the driver tries to access the ISP registers. This can be reproduced even without the platform sharing the IRQ line: Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will hang. Fix this by adding a new field, 'irqs_enabled'
Enable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will hang. Fix this by adding a new field, 'irqs_enabled', which is used to bail out from the interrupt handler when the ISP is not operational. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/abd34206f396d3ae50cddbd5aa840b8cd7f68c63 - https://git.kernel.org/stable/c/b39b4d207d4f236a74e20d291f6356f2231fd9ee - https://git.kernel.org/stable/c/edcf92bc66d8361c51dff953a55210e5cfd95587 - https://git.kernel.org/stable/c/ffb635bb398fc07cb38f8a7b4a82cbe5f412f08e
CVE ID: CVE-2023-52661 State: PUBLISHED Published: 2024-05-17T13:40:58.623Z Last Updated: 2025-05-04T07:41:05.352Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() If clk_get_sys(..., "pll_d2_out0") fails, the clk_get_sys() call must be undone. Add the missing clk_put and a new 'put_pll_d_out0' label in the error handling path, and use it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/5c8dc26e31b8b410ad1895e0d314def50c76eed0 - https://git.kernel.org/stable/c/f3f407cc
s: - https://git.kernel.org/stable/c/5c8dc26e31b8b410ad1895e0d314def50c76eed0 - https://git.kernel.org/stable/c/f3f407ccbe84a34de9be3195d22cdd5969f3fd9f - https://git.kernel.org/stable/c/845322a9c06dd1dcf35b6c4e3af89684297c23cc - https://git.kernel.org/stable/c/2388c36e028fff7f8ffd515681a14c6c2c07fea7 - https://git.kernel.org/stable/c/fa74e4f5d0821829545b9f7034a0e577c205c101 - https://git.kernel.org/stable/c/45c8034db47842b25a3ab6139d71e13b4e67b9b3
CVE ID: CVE-2023-52662 State: PUBLISHED Published: 2024-05-17T13:41:02.183Z Last Updated: 2025-05-04T07:41:06.457Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node When ida_alloc_max fails, resources allocated before should be freed, including *res allocated by kmalloc and ttm_resource_init. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/03b1072616a8f7d6e8594f643b416a9467c83fbf - https://git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a - https://git.kernel.org/stable/c/83e0f220d1e992fa0741
/git.kernel.org/stable/c/40624af6674745e174c754a20d7c53c250e65e7a - https://git.kernel.org/stable/c/83e0f220d1e992fa074157fcf14945bf170ffbc5 - https://git.kernel.org/stable/c/6fc6233f6db1579b69b54b44571f1a7fde8186e6 - https://git.kernel.org/stable/c/d1e546ab91c670e536a274a75481034ab7534876 - https://git.kernel.org/stable/c/89709105a6091948ffb6ec2427954cbfe45358ce
CVE ID: CVE-2023-52663 State: PUBLISHED Published: 2024-05-17T13:41:05.630Z Last Updated: 2025-05-04T07:41:07.634Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe() Driver uses kasprintf() to initialize fw_{code,data}_bin members of struct acp_dev_data, but kfree() is never called to deallocate the memory, which results in a memory leak. Fix the issue by switching to devm_kasprintf(). Additionally, ensure the allocation was successful by checking the pointer validity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.o
validity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/88028c45d5871dfc449b2b0a27abf6428453a5ec - https://git.kernel.org/stable/c/be4760799c6a7c01184467287f0de41e0dd255f8 - https://git.kernel.org/stable/c/7296152e58858f928db448826eb7ba5ae611297b - https://git.kernel.org/stable/c/222be59e5eed1554119294edc743ee548c2371d0
CVE ID: CVE-2023-52664 State: PUBLISHED Published: 2024-05-17T13:45:05.545Z Last Updated: 2025-05-20T14:27:31.461Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: atlantic: eliminate double free in error handling logic Driver has a logic leak in ring data allocation/free, where aq_ring_free could be called multiple times on same ring, if system is under stress and got memory allocation error. Ring pointer was used as an indicator of failure, but this is not correct since only ring data is allocated/deallocated. Ring itself is an array member. Changing ring allocation functions to return error code directly. This simplifies
ated. Ring itself is an array member. Changing ring allocation functions to return error code directly. This simplifies error handling and eliminates aq_ring_free on higher layer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0edb3ae8bfa31cd544b0c195bdec00e036002b5d - https://git.kernel.org/stable/c/c11a870a73a3bc4cc7df6dd877a45b181795fcbf - https://git.kernel.org/stable/c/d1fde4a7e1dcc4d49cce285107a7a43c3030878d - https://git.kernel.org/stable/c/b3cb7a830a24527877b0bc900b9bd74a96aea928
CVE ID: CVE-2023-52665 State: REJECTED Published: 2024-05-17T14:01:39.885Z Last Updated: 2024-05-21T07:03:39.429Z Description: No description available.
CVE ID: CVE-2023-52666 State: REJECTED Published: 2024-05-17T14:01:44.167Z Last Updated: 2024-06-12T08:21:38.633Z Description: No description available.