Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
b_add() does its cleanup. Resolves a splat: Syzkaller reported a UAF in ib_destroy_qp_user workqueue: Failed to create a rescuer kthread for wq "mkey_cache": -EINTR infiniband mlx5_0: mlx5_mkey_cache_init:981:(pid 1642): failed to create work queue infiniband mlx5_0: mlx5_ib_stage_post_ib_reg_umr_init:4075:(pid 1642): mr cache init failed -12 ================================================================== BUG: KASAN: slab-use-after-free in ib_destroy_qp_user (drivers/infiniband/core/verbs.c:2073) Read of size 8 at addr ffff88810da310a8 by task repro_upstream/1642 Call Trace: <TASK> kasan_report (mm/kasan/report.c:590) ib_destroy_qp_user (drivers/infiniband/core/verbs.c:2073) mlx5r_umr_res
ace: <TASK> kasan_report (mm/kasan/report.c:590) ib_destroy_qp_user (drivers/infiniband/core/verbs.c:2073) mlx5r_umr_resource_cleanup (drivers/infiniband/hw/mlx5/umr.c:198) __mlx5_ib_add (drivers/infiniband/hw/mlx5/main.c:4178) mlx5r_probe (drivers/infiniband/hw/mlx5/main.c:4402) ... </TASK> Allocated by task 1642: __kmalloc (./include/linux/kasan.h:198 mm/slab_common.c:1026 mm/slab_common.c:1039) create_qp (./include/linux/slab.h:603 ./include/linux/slab.h:720 ./include/rdma/ib_verbs.h:2795 drivers/infiniband/core/verbs.c:1209) ib_create_qp_kernel (drivers/infiniband/core/verbs.c:1347) mlx5r_umr_resource_init (drivers/infiniband/hw/mlx5/umr.c:164) mlx5_ib_stage_post_ib_reg_umr_init (drivers
verbs.c:1347) mlx5r_umr_resource_init (drivers/infiniband/hw/mlx5/umr.c:164) mlx5_ib_stage_post_ib_reg_umr_init (drivers/infiniband/hw/mlx5/main.c:4070) __mlx5_ib_add (drivers/infiniband/hw/mlx5/main.c:4168) mlx5r_probe (drivers/infiniband/hw/mlx5/main.c:4402) ... Freed by task 1642: __kmem_cache_free (mm/slub.c:1826 mm/slub.c:3809 mm/slub.c:3822) ib_destroy_qp_user (drivers/infiniband/core/verbs.c:2112) mlx5r_umr_resource_cleanup (drivers/infiniband/hw/mlx5/umr.c:198) mlx5_ib_stage_post_ib_reg_umr_init (drivers/infiniband/hw/mlx5/main.c:4076 drivers/infiniband/hw/mlx5/main.c:4065) __mlx5_ib_add (drivers/infiniband/hw/mlx5/main.c:4168) mlx5r_probe (drivers/infiniband/hw/mlx5/main.c:4402) ...
.c:4065) __mlx5_ib_add (drivers/infiniband/hw/mlx5/main.c:4168) mlx5r_probe (drivers/infiniband/hw/mlx5/main.c:4402) ... Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/437f033e30c897bb3723eac9e9003cd9f88d00a3 - https://git.kernel.org/stable/c/4f4a7a7d1404297f2a92df0046f7e64dc5c52dd9 - https://git.kernel.org/stable/c/6387f269d84e6e149499408c4d1fc805017729b2 - https://git.kernel.org/stable/c/2ef422f063b74adcc4a4a9004b0a87bb55e0a836
CVE ID: CVE-2023-52852 State: PUBLISHED Published: 2024-05-21T15:31:47.889Z Last Updated: 2025-05-04T12:49:41.026Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to avoid use-after-free on dic Call trace: __memcpy+0x128/0x250 f2fs_read_multi_pages+0x940/0xf7c f2fs_mpage_readpages+0x5a8/0x624 f2fs_readahead+0x5c/0x110 page_cache_ra_unbounded+0x1b8/0x590 do_sync_mmap_readahead+0x1dc/0x2e4 filemap_fault+0x254/0xa8c f2fs_filemap_fault+0x2c/0x104 __do_fault+0x7c/0x238 do_handle_mm_fault+0x11bc/0x2d14 do_mem_abort+0x3a8/0x1004 el0_da+0x3c/0xa0 el0t_64_sync_handler+0xc4/0xec el0t_64_sync+0x1b4/0x1b8 In f2fs_read_mu
x2d14 do_mem_abort+0x3a8/0x1004 el0_da+0x3c/0xa0 el0t_64_sync_handler+0xc4/0xec el0t_64_sync+0x1b4/0x1b8 In f2fs_read_multi_pages(), once f2fs_decompress_cluster() was called if we hit cached page in compress_inode's cache, dic may be released, it needs break the loop rather than continuing it, in order to avoid accessing invalid dic pointer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/8c4504cc0c64862740a6acb301e0cfa59580dbc5 - https://git.kernel.org/stable/c/9375ea7f269093d7c884857ae1f47633a91f429c - https://git.kernel.org/stable/c/932ddb5c29e884cc6fac20417ece72ba4a35c401 - https://git.kernel.org/stable/c/9d065aa5
9c - https://git.kernel.org/stable/c/932ddb5c29e884cc6fac20417ece72ba4a35c401 - https://git.kernel.org/stable/c/9d065aa52b6ee1b06f9c4eca881c9b4425a12ba2 - https://git.kernel.org/stable/c/b0327c84e91a0f4f0abced8cb83ec86a7083f086
CVE ID: CVE-2023-52853 State: PUBLISHED Published: 2024-05-21T15:31:48.571Z Last Updated: 2025-05-04T07:44:21.084Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called INIT_DELAYED_WORK within cp2112_gpio_irq_startup, resulting in duplicate initilizations of the workqueue on subsequent IRQ startups following an initial request. This resulted in a warning in set_work_data in workqueue.c, as well as a rare NULL dereference within process_one_work in workqueue.c. Initialize the workqueue within _probe instead. Additional Analyst Notes: - CISA ADP Vul
rocess_one_work in workqueue.c. Initialize the workqueue within _probe instead. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/df0daac2709473531d6a3472997cc65301ac06d6 - https://git.kernel.org/stable/c/727203e6e7e7020e1246fc1628cbdb8d90177819 - https://git.kernel.org/stable/c/3d959406c8fff2334d83d0c352d54fd6f5b2e7cd - https://git.kernel.org/stable/c/012d0c66f9392a99232ac28217229f32dd3a70cf - https://git.kernel.org/stable/c/bafb12b629b7c3ad59812dd1ac1b0618062e0e38 - https://git.kernel.org/stable/c/fb5718bc67337dde1528661f419ffcf275757592 - https://git.kernel.org/stable/c/eb1121fac7986b30915ba20c5a04cc01fdcf160c - https
718bc67337dde1528661f419ffcf275757592 - https://git.kernel.org/stable/c/eb1121fac7986b30915ba20c5a04cc01fdcf160c - https://git.kernel.org/stable/c/e3c2d2d144c082dd71596953193adf9891491f42
CVE ID: CVE-2023-52854 State: PUBLISHED Published: 2024-05-21T15:31:49.235Z Last Updated: 2025-05-04T12:49:42.224Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: padata: Fix refcnt handling in padata_free_shell() In a high-load arm64 environment, the pcrypt_aead01 test in LTP can lead to system UAF (Use-After-Free) issues. Due to the lengthy analysis of the pcrypt_aead01 function call, I'll describe the problem scenario using a simplified model: Suppose there's a user of padata named `user_function` that adheres to the padata requirement of calling `padata_free_shell` after `serial()` has been invoked, as demonstrated in the fo
es to the padata requirement of calling `padata_free_shell` after `serial()` has been invoked, as demonstrated in the following code: ```c struct request { struct padata_priv padata; struct completion *done; }; void parallel(struct padata_priv *padata) { do_something(); } void serial(struct padata_priv *padata) { struct request *request = container_of(padata, struct request, padata); complete(request->done); } void user_function() { DECLARE_COMPLETION(done) padata->parallel = parallel; padata->serial = serial; padata_do_parallel(); wait_for_completion(&done); padata_free_shell(); } ``` In the corresponding padata.c file, there's the following code: ```c static void padata_serial_worker(struc
ell(); } ``` In the corresponding padata.c file, there's the following code: ```c static void padata_serial_worker(struct work_struct *serial_work) { ... cnt = 0; while (!list_empty(&local_list)) { ... padata->serial(padata); cnt++; } local_bh_enable(); if (refcount_sub_and_test(cnt, &pd->refcnt)) padata_free_pd(pd); } ``` Because of the high system load and the accumulation of unexecuted softirq at this moment, `local_bh_enable()` in padata takes longer to execute than usual. Subsequently, when accessing `pd->refcnt`, `pd` has already been released by `padata_free_shell()`, resulting in a UAF issue with `pd->refcnt`. The fix is straightforward: add `refcount_dec_and_test` before calling `pa
, resulting in a UAF issue with `pd->refcnt`. The fix is straightforward: add `refcount_dec_and_test` before calling `padata_free_pd` in `padata_free_shell`. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/41aad9d6953984d134fc50f631f24ef476875d4d - https://git.kernel.org/stable/c/0dd34a7ad395dbcf6ae60e48e9786050e25b9bc5 - https://git.kernel.org/stable/c/c7c26d0ef5d20f00dbb2ae3befcabbe0efa77275 - https://git.kernel.org/stable/c/1e901bcb8af19416b65f5063a4af7996e5a51d7f - https://git.kernel.org/stable/c/1734a79e951914f1db2c65e635012a35db1c674b - https://git.kernel.org/stable/c/7ddc21e317b360c3444de3023bcc83b85fabae2f
CVE ID: CVE-2023-52855 State: PUBLISHED Published: 2024-05-21T15:31:49.909Z Last Updated: 2025-05-04T07:44:23.557Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In _dwc2_hcd_urb_enqueue(), "urb->hcpriv = NULL" is executed without holding the lock "hsotg->lock". In _dwc2_hcd_urb_dequeue(): spin_lock_irqsave(&hsotg->lock, flags); ... if (!urb->hcpriv) { dev_dbg(hsotg->dev, "## urb->hcpriv is NULL ##\n"); goto out; } rc = dwc2_hcd_urb_dequeue(hsotg, urb->hcpriv); // Use urb->hcpriv ... out: spin_unlock_irqrestore(&hsotg->lock, flags); When _dwc2_hcd_urb
dequeue(hsotg, urb->hcpriv); // Use urb->hcpriv ... out: spin_unlock_irqrestore(&hsotg->lock, flags); When _dwc2_hcd_urb_enqueue() and _dwc2_hcd_urb_dequeue() are concurrently executed, the NULL check of "urb->hcpriv" can be executed before "urb->hcpriv = NULL". After urb->hcpriv is NULL, it can be used in the function call to dwc2_hcd_urb_dequeue(), which can cause a NULL pointer dereference. This possible bug is found by an experimental static analysis tool developed by myself. This tool analyzes the locking APIs to extract function pairs that can be concurrently executed, and then analyzes the instructions in the paired functions to identify possible concurrency bugs including data races
, and then analyzes the instructions in the paired functions to identify possible concurrency bugs including data races and atomicity violations. The above possible bug is reported, when my tool analyzes the source code of Linux 6.5. To fix this possible bug, "urb->hcpriv = NULL" should be executed with holding the lock "hsotg->lock". After using this patch, my tool never reports the possible bug, with the kernelconfiguration allyesconfig for x86_64. Because I have no associated hardware, I cannot test the patch in runtime testing, and just verify it according to the code logic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/s
ogic. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/14c9ec34e8118fbffd7f5431814d767726323e72 - https://git.kernel.org/stable/c/fed492aa6493a91a77ebd51da6fb939c98d94a0d - https://git.kernel.org/stable/c/64c47749fc7507ed732e155c958253968c1d275e - https://git.kernel.org/stable/c/bdb3dd4096302d6b87441fdc528439f171b04be6 - https://git.kernel.org/stable/c/fcaafb574fc88a52dce817f039f7ff2f9da38001 - https://git.kernel.org/stable/c/6b21a22728852d020a6658d39cd7bb7e14b07790 - https://git.kernel.org/stable/c/3e851a77a13ce944d703721793f49ee82622986d - https://git.kernel.org/stable/c/a7bee9598afb38004841a41dd8fe68c1faff4e90 - http
851a77a13ce944d703721793f49ee82622986d - https://git.kernel.org/stable/c/a7bee9598afb38004841a41dd8fe68c1faff4e90 - https://git.kernel.org/stable/c/ef307bc6ef04e8c1ea843231db58e3afaafa9fa6
CVE ID: CVE-2023-52856 State: PUBLISHED Published: 2024-05-21T15:31:50.569Z Last Updated: 2025-05-04T07:44:24.755Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/bridge: lt8912b: Fix crash on bridge detach The lt8912b driver, in its bridge detach function, calls drm_connector_unregister() and drm_connector_cleanup(). drm_connector_unregister() should be called only for connectors explicitly registered with drm_connector_register(), which is not the case in lt8912b. The driver's drm_connector_funcs.destroy hook is set to drm_connector_cleanup(). Thus the driver should not call either drm_connector_unregister() nor drm_connec
hook is set to drm_connector_cleanup(). Thus the driver should not call either drm_connector_unregister() nor drm_connector_cleanup() in its lt8912_bridge_detach(), as they cause a crash on bridge detach: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=00000000858f3000 [0000000000000000] pgd=0800000085918003, p4d=08000
= 0, Xs = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=00000000858f3000 [0000000000000000] pgd=0800000085918003, p4d=0800000085918003, pud=0800000085431003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Modules linked in: tidss(-) display_connector lontium_lt8912b tc358768 panel_lvds panel_simple drm_dma_helper drm_kms_helper drm drm_panel_orientation_quirks CPU: 3 PID: 462 Comm: rmmod Tainted: G W 6.5.0-rc2+ #2 Hardware name: Toradex Verdin AM62 on Verdin Development Board (DT) pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : drm_connector_cleanup+0x78/0x2d4 [drm] lr : lt8912_bridge_detach+0x54/0x6c [lontium_lt8912b] sp : ffff800082ed3a90 x29
: drm_connector_cleanup+0x78/0x2d4 [drm] lr : lt8912_bridge_detach+0x54/0x6c [lontium_lt8912b] sp : ffff800082ed3a90 x29: ffff800082ed3a90 x28: ffff0000040c1940 x27: 0000000000000000 x26: 0000000000000000 x25: dead000000000122 x24: dead000000000122 x23: dead000000000100 x22: ffff000003fb6388 x21: 0000000000000000 x20: 0000000000000000 x19: ffff000003fb6260 x18: fffffffffffe56e8 x17: 0000000000000000 x16: 0010000000000000 x15: 0000000000000038 x14: 0000000000000000 x13: ffff800081914b48 x12: 000000000000040e x11: 000000000000015a x10: ffff80008196ebb8 x9 : ffff800081914b48 x8 : 00000000ffffefff x7 : ffff0000040c1940 x6 : ffff80007aa649d0 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80
8 : 00000000ffffefff x7 : ffff0000040c1940 x6 : ffff80007aa649d0 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008159e008 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: drm_connector_cleanup+0x78/0x2d4 [drm] lt8912_bridge_detach+0x54/0x6c [lontium_lt8912b] drm_bridge_detach+0x44/0x84 [drm] drm_encoder_cleanup+0x40/0xb8 [drm] drmm_encoder_alloc_release+0x1c/0x30 [drm] drm_managed_release+0xac/0x148 [drm] drm_dev_put.part.0+0x88/0xb8 [drm] devm_drm_dev_init_release+0x14/0x24 [drm] devm_action_release+0x14/0x20 release_nodes+0x5c/0x90 devres_release_all+0x8c/0xe0 device_unbind_cleanup+0x18/0x68 device_release_driver_internal+0x208/0x23c driver_detach+0x4c
vres_release_all+0x8c/0xe0 device_unbind_cleanup+0x18/0x68 device_release_driver_internal+0x208/0x23c driver_detach+0x4c/0x94 bus_remove_driver+0x70/0xf4 driver_unregister+0x30/0x60 platform_driver_unregister+0x14/0x20 tidss_platform_driver_exit+0x18/0xb2c [tidss] __arm64_sys_delete_module+0x1a0/0x2b4 invoke_syscall+0x48/0x110 el0_svc_common.constprop.0+0x60/0x10c do_el0_svc_compat+0x1c/0x40 el0_svc_compat+0x40/0xac el0t_32_sync_handler+0xb0/0x138 el0t_32_sync+0x194/0x198 Code: 9104a276 f2fbd5b7 aa0203e1 91008af8 (f85c0420) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/42071feab712ba2a139b8928f7e0f8d3a6fc719e - https
- CVE Program Container: References: - https://git.kernel.org/stable/c/42071feab712ba2a139b8928f7e0f8d3a6fc719e - https://git.kernel.org/stable/c/7bf0cb8f40280a85034990dfe42be8ca8f80f37a - https://git.kernel.org/stable/c/fcd9895e365474709844eeb31cfe53d912c3596e - https://git.kernel.org/stable/c/b65e3249f3ca96e3c736af889461d80d675feab6 - https://git.kernel.org/stable/c/44283993144a03af9df31934d6c32bbd42d1a347
CVE ID: CVE-2023-52857 State: PUBLISHED Published: 2024-05-21T15:31:51.232Z Last Updated: 2025-11-03T19:28:50.720Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multiplying 2 variable of different types. Change to assign a value of one variable and then multiply the other variable. 2. Add a int variable for multiplier calculation instead of calculating different types multiplier with dma_addr_t variable directly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a12bd6751005
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a12bd675100531f9fb4508fd4430dd1632325a0e - https://git.kernel.org/stable/c/0d8a1df39d3fc34560e2cc663b5c340d06a25396 - https://git.kernel.org/stable/c/96312a251d4dcee5d36e32edba3002bfde0ddd9c - https://git.kernel.org/stable/c/b0b0d811eac6b4c52cb9ad632fa6384cf48869e7
CVE ID: CVE-2023-52858 State: PUBLISHED Published: 2024-05-21T15:31:51.891Z Last Updated: 2025-05-04T07:44:26.846Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e8ae4b49dd9cfde69d8de8c0c0cd7cf1b004482e - https://git.kernel.org/stable/c/4f861b63945e076f9f003a5fad958174096df1ee - https://git.kernel.org/stable/c/e964d21dc034b650d719c4ea39564bec72b42f
able/c/4f861b63945e076f9f003a5fad958174096df1ee - https://git.kernel.org/stable/c/e964d21dc034b650d719c4ea39564bec72b42f94 - https://git.kernel.org/stable/c/a836efc21ef04608333d6d05753e558ebd1f85d0 - https://git.kernel.org/stable/c/1d89430fc3158f872d492f1b88d07262f48290c0 - https://git.kernel.org/stable/c/5fbea47eebff5daeca7d918c99289bcd3ae4dc8d - https://git.kernel.org/stable/c/2befa515c1bb6cdd33c262b909d93d1973a219aa
CVE ID: CVE-2023-52859 State: PUBLISHED Published: 2024-05-21T15:31:52.546Z Last Updated: 2025-05-04T07:44:27.898Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free. Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been fa
_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0e1e88bba286621b886218363de07b319d6208b2 - https://git.kernel.org/stable/c/b660420f449d094b1fabfa504889810b3a63cdd5 - https://git.kernel.org/stable/c/3405f364f82d4f5407a8b4c519dc15d24b847fda - https://git.kernel.org/stable/c/75bab28ffd05ec8879c197890b1bd1dfec8d3f63 - https://git.kernel.org/stable/c/b805cafc604bfdb671fae7347a57f51154afa735
CVE ID: CVE-2023-52860 State: PUBLISHED Published: 2024-05-21T15:31:53.194Z Last Updated: 2025-05-04T07:44:28.942Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process When tearing down a 'hisi_hns3' PMU, we mistakenly run the CPU hotplug callbacks after the device has been unregistered, leading to fireworks when we try to execute empty function callbacks within the driver: | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 | CPU: 0 PID: 15 Comm: cpuhp/0 Tainted: G W O 5.12.0-rc4+ #1 | Hardware name: , BI
e at virtual address 0000000000000000 | CPU: 0 PID: 15 Comm: cpuhp/0 Tainted: G W O 5.12.0-rc4+ #1 | Hardware name: , BIOS KpxxxFPGA 1P B600 V143 04/22/2021 | pstate: 80400009 (Nzcv daif +PAN -UAO -TCO BTYPE=--) | pc : perf_pmu_migrate_context+0x98/0x38c | lr : perf_pmu_migrate_context+0x94/0x38c | | Call trace: | perf_pmu_migrate_context+0x98/0x38c | hisi_hns3_pmu_offline_cpu+0x104/0x12c [hisi_hns3_pmu] Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been unregistered. [will: Rewrote commit message] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://
wrote commit message] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4589403a343bb0c72a6faf5898386ff964d4e01a - https://git.kernel.org/stable/c/3f5827371763f2d9c70719c270055a81d030f3d0 - https://git.kernel.org/stable/c/d04ff5437a45f275db5530efb49b68d0ec851f6f - https://git.kernel.org/stable/c/50b560783f7f71790bcf70e9e9855155fb0af8c1
CVE ID: CVE-2023-52861 State: PUBLISHED Published: 2024-05-21T15:31:53.904Z Last Updated: 2025-05-04T07:44:30.110Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer (of zeroes) as the EDID information to the sound framework if there is no connector attached. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331 - https://git.kernel.
Container: References: - https://git.kernel.org/stable/c/2c80c4f0d2845645f41cbb7c9304c8efbdbd4331 - https://git.kernel.org/stable/c/1669d7b21a664aa531856ce85b01359a376baebc - https://git.kernel.org/stable/c/1374561a7cbc9a000b77bb0473bb2c19daf18d86 - https://git.kernel.org/stable/c/d0375f6858c4ff7244b62b02eb5e93428e1916cd
CVE ID: CVE-2023-52862 State: PUBLISHED Published: 2024-05-21T15:31:54.544Z Last Updated: 2025-05-04T07:44:31.377Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null pointer dereference in error message This patch fixes a null pointer dereference in the error message that is printed when the Display Core (DC) fails to initialize. The original message includes the DC version number, which is undefined if the DC is not initialized. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/97ef07182ac46b069bb5e7d46cb903a764d67898 - https://git.ke
ogram Container: References: - https://git.kernel.org/stable/c/97ef07182ac46b069bb5e7d46cb903a764d67898 - https://git.kernel.org/stable/c/8b72c5d4a5d25e76b16283397c40b8b3c0d70019 - https://git.kernel.org/stable/c/0c3601a2fbfb265ce283651480e30c8e60459112
CVE ID: CVE-2023-52863 State: PUBLISHED Published: 2024-05-21T15:31:55.198Z Last Updated: 2025-05-04T07:44:32.560Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a - https://git.kernel.org/st