Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
er. Reproducer and dmesg log (note that kfence doesn't detect it every time): $ echo 1 > /sys/class/net/enp65s0f0np0/device/sriov_numvfs $ echo 0 > /sys/class/net/enp65s0f0np0/device/sriov_numvfs BUG: KFENCE: use-after-free read in efx_ef10_sriov_free_vf_vswitching+0x82/0x170 [sfc] Use-after-free read at 0x00000000ff3c1ba5 (in kfence-#224): efx_ef10_sriov_free_vf_vswitching+0x82/0x170 [sfc] efx_ef10_pci_sriov_disable+0x38/0x70 [sfc] efx_pci_sriov_configure+0x24/0x40 [sfc] sriov_numvfs_store+0xfe/0x140 kernfs_fop_write_iter+0x11c/0x1b0 new_sync_write+0x11f/0x1b0 vfs_write+0x1eb/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae kfence-#224: 0x00000000e
1eb/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae kfence-#224: 0x00000000edb8ef95-0x00000000671f5ce1, size=2792, cache=kmalloc-4k allocated by task 6771 on cpu 10 at 3137.860196s: pci_alloc_dev+0x21/0x60 pci_iov_add_virtfn+0x2a2/0x320 sriov_enable+0x212/0x3e0 efx_ef10_sriov_configure+0x67/0x80 [sfc] efx_pci_sriov_configure+0x24/0x40 [sfc] sriov_numvfs_store+0xba/0x140 kernfs_fop_write_iter+0x11c/0x1b0 new_sync_write+0x11f/0x1b0 vfs_write+0x1eb/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae freed by task 6771 on cpu 12 at 3170.991309s: device_release+0x34/0x90 kobject_cleanup+0x3a/0x130 pci_iov_remove_v
/0xae freed by task 6771 on cpu 12 at 3170.991309s: device_release+0x34/0x90 kobject_cleanup+0x3a/0x130 pci_iov_remove_virtfn+0xd9/0x120 sriov_disable+0x30/0xe0 efx_ef10_pci_sriov_disable+0x57/0x70 [sfc] efx_pci_sriov_configure+0x24/0x40 [sfc] sriov_numvfs_store+0xfe/0x140 kernfs_fop_write_iter+0x11c/0x1b0 new_sync_write+0x11f/0x1b0 vfs_write+0x1eb/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x5c/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3199e34912d84cdfb8a93a984c5ae5c73fb13e84 - https://git.kernel.org/stable/c/c9e75bb22a26e391f189f5a5133dd63dcb57fdaa - https://git.kernel.org/stable/c/9c854ae512
- https://git.kernel.org/stable/c/c9e75bb22a26e391f189f5a5133dd63dcb57fdaa - https://git.kernel.org/stable/c/9c854ae512b89229aeee93849e9bd4c115b37909 - https://git.kernel.org/stable/c/bcad880865bfb421885364b1f0c7351280fe2b97 - https://git.kernel.org/stable/c/c2240500817b3b4b996cdf2a461a3a5679f49b94 - https://git.kernel.org/stable/c/58d93e9d160c0de6d867c7eb4c2206671a351eb1 - https://git.kernel.org/stable/c/e435c4aeeaa073091f7f3b7735af2ef5c97d63f2 - https://git.kernel.org/stable/c/ebe41da5d47ac0fff877e57bd14c54dccf168827
CVE ID: CVE-2022-49627 State: PUBLISHED Published: 2025-02-26T02:23:41.763Z Last Updated: 2025-10-01T20:17:06.268Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in ima_init_crypto() On failure to allocate the SHA1 tfm, IMA fails to initialize and exits without freeing the ima_algo_array. Add the missing kfree() for ima_algo_array to avoid the potential memory leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c1d9702ceb4a091da6bee380627596d1fba09274 - https://git.kernel.org/stable/c/601ae26aa2802a4c10c94d7388a99eabdbefab2b - https://git.kernel.o
bee380627596d1fba09274 - https://git.kernel.org/stable/c/601ae26aa2802a4c10c94d7388a99eabdbefab2b - https://git.kernel.org/stable/c/830de9667b3ada0a75a3f098dfc7159709fe397b - https://git.kernel.org/stable/c/067d2521874135267e681c19d42761c601d503d6
CVE ID: CVE-2022-49628 State: PUBLISHED Published: 2025-02-26T02:23:42.241Z Last Updated: 2025-05-04T08:42:07.742Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix leaks in probe These two error paths should clean up before returning. References: - https://git.kernel.org/stable/c/f4bd3202a2b4194ab6c0ce61628095d54f994db4 - https://git.kernel.org/stable/c/dd91bc60f305610401b2196bedb573693d6c8e46 - https://git.kernel.org/stable/c/23aa6d5088e3bd65de77c5c307237b9937f8b48a
CVE ID: CVE-2022-49629 State: PUBLISHED Published: 2025-02-26T02:23:42.768Z Last Updated: 2025-10-01T19:36:50.426Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix data-races around nexthop_compat_mode. While reading nexthop_compat_mode, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a51040d4b120f3520df64fb0b9c63b31d69bea9b - https://git.kernel.org/stable/c/0d17723afea3ae8c9f245c9bbd2ba5945b77e812 - https://git.kernel.org/stable/c/ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd - https://git.ker
e8c9f245c9bbd2ba5945b77e812 - https://git.kernel.org/stable/c/ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd - https://git.kernel.org/stable/c/bdf00bf24bef9be1ca641a6390fd5487873e0d2e
CVE ID: CVE-2022-49630 State: PUBLISHED Published: 2025-02-26T02:23:43.249Z Last Updated: 2025-10-01T19:36:50.294Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_ecn_fallback. While reading sysctl_tcp_ecn_fallback, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8bcf7339f2cf70ea4461df6ea045d1aadfabfa11 - https://git.kernel.org/stable/c/1ec3d6c2626ee6e1b36b7bd006873a271406ba61 - https://git.kernel.org/stable/c/12b8d9ca7e678abc48195294494f1815b555d658
CVE ID: CVE-2022-49631 State: PUBLISHED Published: 2025-02-26T02:23:43.727Z Last Updated: 2025-10-01T19:36:50.159Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: raw: Fix a data-race around sysctl_raw_l3mdev_accept. While reading sysctl_raw_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/cc9540ba5b3652c473af7e54892a48cdced87983 - https://git.kernel.org/stable/c/038a87b3e460d2ee579c8b1bd3890d816d6687b1 - https://git.kernel.org/stable/c/46e9c46203fd4676720ddca0fef7eff26826648e - https://g
3e460d2ee579c8b1bd3890d816d6687b1 - https://git.kernel.org/stable/c/46e9c46203fd4676720ddca0fef7eff26826648e - https://git.kernel.org/stable/c/ab5adca2e17d6595f3fc0e25ccb6bcbe2e01ca4f - https://git.kernel.org/stable/c/1dace014928e6e385363032d359a04dee9158af0
CVE ID: CVE-2022-49632 State: PUBLISHED Published: 2025-02-26T02:23:44.227Z Last Updated: 2025-10-01T19:36:50.031Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. While reading sysctl_icmp_errors_use_inbound_ifaddr, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/de9490c32bc10020efdd1509689a28f197d6dfb8 - https://git.kernel.org/stable/c/f9617844e4d5d6331dbce3fb19a24e5bda201e58 - https://git.kernel.org/stable/c/d2efabce81db7eed1c98fa1a3
kernel.org/stable/c/f9617844e4d5d6331dbce3fb19a24e5bda201e58 - https://git.kernel.org/stable/c/d2efabce81db7eed1c98fa1a3f203f0edd738ac3
CVE ID: CVE-2022-49633 State: PUBLISHED Published: 2025-02-26T02:23:44.718Z Last Updated: 2025-10-01T19:36:49.826Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While reading sysctl_icmp_echo_enable_probe, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/cce955efa0ab81f7fb72e22beed372054c86005c - https://git.kernel.org/stable/c/05c615033174f1d19374f42285ccd8e9af13e427 - https://git.kernel.org/stable/c/4a2f7083cc6cb72dade9a63699ca352fad26d1cd
CVE ID: CVE-2022-49634 State: PUBLISHED Published: 2025-02-26T02:23:45.254Z Last Updated: 2025-10-01T19:36:49.653Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in proc_dou8vec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_dou8vec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_dou8vec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's
, proc_dou8vec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f177b382c33900d0e5a9766493c11a1074076f78 - https://git.kernel.org/stable/c/e58b02e445463065b4078bf621561da75197853f - https://git.kernel.org/stable/c/5f776daef0b5354615ec4b4234cd9539ca05f273 - https://git.kernel.org/stable/c/7dee5d7747a69aa2be41f04c6a7ecfe3ac8cdf18
CVE ID: CVE-2022-49635 State: PUBLISHED Published: 2025-02-26T02:23:45.744Z Last Updated: 2025-05-04T08:42:16.363Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/i915/selftests: fix subtraction overflow bug On some machines hole_end can be small enough to cause subtraction overflow. On the other side (addr + 2 * min_alignment) can overflow in case of mock tests. This patch should handle both cases. (cherry picked from commit ab3edc679c552a466e4bf0b11af3666008bd65a2) References: - https://git.kernel.org/stable/c/e8997d2d6b8d764e12489f1af2a1ce1d7384ca2a - https://git.kernel.org/stable/c/333991c4e66b3d4b5613315f18016da80344f65
ble/c/e8997d2d6b8d764e12489f1af2a1ce1d7384ca2a - https://git.kernel.org/stable/c/333991c4e66b3d4b5613315f18016da80344f659
CVE ID: CVE-2022-49636 State: PUBLISHED Published: 2025-02-26T02:23:46.222Z Last Updated: 2025-05-04T08:42:17.541Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vlan: fix memory leak in vlan_newlink() Blamed commit added back a bug I fixed in commit 9bbd917e0bec ("vlan: fix memory leak in vlan_dev_set_egress_priority") If a memory allocation fails in vlan_changelink() after other allocations succeeded, we need to call vlan_dev_free_egress_priority() to free all allocated memory because after a failed ->newlink() we do not call any methods like ndo_uninit() or dev->priv_destructor(). In following example, if the allocation for
k() we do not call any methods like ndo_uninit() or dev->priv_destructor(). In following example, if the allocation for last element 2000:2001 fails, we need to free eight prior allocations: ip link add link dummy0 dummy0.100 type vlan id 100 \ egress-qos-map 1:2 2:3 3:4 4:5 5:6 6:7 7:8 8:9 2000:2001 syzbot report was: BUG: memory leak unreferenced object 0xffff888117bd1060 (size 32): comm "syz-executor408", pid 3759, jiffies 4294956555 (age 34.090s) hex dump (first 32 bytes): 09 00 00 00 00 a0 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff83fc60ad>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83fc
00 00 00 00 00 ................ backtrace: [<ffffffff83fc60ad>] kmalloc include/linux/slab.h:600 [inline] [<ffffffff83fc60ad>] vlan_dev_set_egress_priority+0xed/0x170 net/8021q/vlan_dev.c:193 [<ffffffff83fc6628>] vlan_changelink+0x178/0x1d0 net/8021q/vlan_netlink.c:128 [<ffffffff83fc67c8>] vlan_newlink+0x148/0x260 net/8021q/vlan_netlink.c:185 [<ffffffff838b1278>] rtnl_newlink_create net/core/rtnetlink.c:3363 [inline] [<ffffffff838b1278>] __rtnl_newlink+0xa58/0xdc0 net/core/rtnetlink.c:3580 [<ffffffff838b1629>] rtnl_newlink+0x49/0x70 net/core/rtnetlink.c:3593 [<ffffffff838ac66c>] rtnetlink_rcv_msg+0x21c/0x5c0 net/core/rtnetlink.c:6089 [<ffffffff839f9c37>] netlink_rcv_skb+0x87/0x1d0 net/netlin
66c>] rtnetlink_rcv_msg+0x21c/0x5c0 net/core/rtnetlink.c:6089 [<ffffffff839f9c37>] netlink_rcv_skb+0x87/0x1d0 net/netlink/af_netlink.c:2501 [<ffffffff839f8da7>] netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] [<ffffffff839f8da7>] netlink_unicast+0x397/0x4c0 net/netlink/af_netlink.c:1345 [<ffffffff839f9266>] netlink_sendmsg+0x396/0x710 net/netlink/af_netlink.c:1921 [<ffffffff8384dbf6>] sock_sendmsg_nosec net/socket.c:714 [inline] [<ffffffff8384dbf6>] sock_sendmsg+0x56/0x80 net/socket.c:734 [<ffffffff8384e15c>] ____sys_sendmsg+0x36c/0x390 net/socket.c:2488 [<ffffffff838523cb>] ___sys_sendmsg+0x8b/0xd0 net/socket.c:2542 [<ffffffff838525b8>] __sys_sendmsg net/socket.c:2571 [inline]
fffff838523cb>] ___sys_sendmsg+0x8b/0xd0 net/socket.c:2542 [<ffffffff838525b8>] __sys_sendmsg net/socket.c:2571 [inline] [<ffffffff838525b8>] __do_sys_sendmsg net/socket.c:2580 [inline] [<ffffffff838525b8>] __se_sys_sendmsg net/socket.c:2578 [inline] [<ffffffff838525b8>] __x64_sys_sendmsg+0x78/0xf0 net/socket.c:2578 [<ffffffff845ad8d5>] do_syscall_x64 arch/x86/entry/common.c:50 [inline] [<ffffffff845ad8d5>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 [<ffffffff8460006a>] entry_SYSCALL_64_after_hwframe+0x46/0xb0 References: - https://git.kernel.org/stable/c/549de58dba4bf1b2adc72e9948b9c76fa88be9d2 - https://git.kernel.org/stable/c/df27729a4fe0002dfd80c96fe1c142829c672728 - https://git.
4bf1b2adc72e9948b9c76fa88be9d2 - https://git.kernel.org/stable/c/df27729a4fe0002dfd80c96fe1c142829c672728 - https://git.kernel.org/stable/c/f5dc10b910bdac523e5947336445a77066c51bf9 - https://git.kernel.org/stable/c/4c43069bb1097dd6cc1cf0f7c43a36d1f7b3910b - https://git.kernel.org/stable/c/72a0b329114b1caa8e69dfa7cdad1dd3c69b8602
CVE ID: CVE-2022-49637 State: PUBLISHED Published: 2025-02-26T02:23:46.711Z Last Updated: 2025-10-01T19:36:49.530Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_sync_mem. While reading sysctl_fib_sync_mem, it can be changed concurrently. So, we need to add READ_ONCE() to avoid a data-race. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7c1acd98fb221dc0d847451b9ab86319f8b9916c - https://git.kernel.org/stable/c/418b191d5f223a8cb6cab09eae1f72c04ba6adf2 - https://git.kernel.org/stable/c/9be8aac91960ea32fd0e874758c9afee665c57d2 - https://git.k
23a8cb6cab09eae1f72c04ba6adf2 - https://git.kernel.org/stable/c/9be8aac91960ea32fd0e874758c9afee665c57d2 - https://git.kernel.org/stable/c/190cd4ff128373271e065afb20f1d2247b3f10c3 - https://git.kernel.org/stable/c/73318c4b7dbd0e781aaababff17376b2894745c0
CVE ID: CVE-2022-49638 State: PUBLISHED Published: 2025-02-26T02:23:47.200Z Last Updated: 2025-10-01T19:36:49.411Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1740e5922fbb705637ae9fa5203db132fc45f9f6 - https://git.kernel.org/stable/c/53ecd09ef2fb35fa69667ae8e414ef6b00fd3bf6 - https://git.kernel.org/stable/c/edeec63b13c252193d626c2a48d7a2f0e7016dc2 - https://git.kernel.org/s
e8e414ef6b00fd3bf6 - https://git.kernel.org/stable/c/edeec63b13c252193d626c2a48d7a2f0e7016dc2 - https://git.kernel.org/stable/c/0cba7ca667ceb06934746ddd9833a25847bde81d - https://git.kernel.org/stable/c/e088ceb73c24ab4774da391d54a6426f4bfaefce - https://git.kernel.org/stable/c/e2828e8c605853f71267825c9415437c0a93e4f2 - https://git.kernel.org/stable/c/798c2cf57c63ab39c8aac24d6a3d50f4fa5eeb06 - https://git.kernel.org/stable/c/48d7ee321ea5182c6a70782aa186422a70e67e22
CVE ID: CVE-2022-49639 State: PUBLISHED Published: 2025-02-26T02:23:47.731Z Last Updated: 2025-10-01T19:36:49.247Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2764f82bbc158d106693ae3ced3675cf4b963b35 - https://git.kernel.org/stable/c/c321e99d2725d11f7e6a4ebd9ce752259f0bae81 - https://git.kernel.org/stable/c/ca26ca5e2f3eeb3e6fe699cd6effa3b4b2aa8698 - https://git.kernel.org
4ebd9ce752259f0bae81 - https://git.kernel.org/stable/c/ca26ca5e2f3eeb3e6fe699cd6effa3b4b2aa8698 - https://git.kernel.org/stable/c/0e41a0f73ccb9be112a80bde3804a771633caaef - https://git.kernel.org/stable/c/fe2a35fa2c4f9c8ce5ef970eb927031387f9446a - https://git.kernel.org/stable/c/07b0caf8aeb9b82e6ecc6c292a3e47c7fcdb1148 - https://git.kernel.org/stable/c/59e26906b89cc35bb54476498772b45cbc32323f - https://git.kernel.org/stable/c/dd44f04b9214adb68ef5684ae87a81ba03632250
CVE ID: CVE-2022-49640 State: PUBLISHED Published: 2025-02-26T02:23:48.206Z Last Updated: 2025-10-01T19:36:49.102Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_douintvec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_douintvec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsy
now, proc_douintvec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e3a2144b3b6bf9ecafd91087c8b8b48171ec19df - https://git.kernel.org/stable/c/40e0477a7371d101c55b69d9c32a7a1ed82ab5ea - https://git.kernel.org/stable/c/b60eddf98b9716651069dfda296c91311a7a6293 - https://git.kernel.org/stable/c/2d3b559df3ed39258737789aae2ae7973d205bc1
CVE ID: CVE-2022-49641 State: PUBLISHED Published: 2025-02-26T02:23:48.675Z Last Updated: 2025-10-01T19:36:48.974Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_douintvec() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_douintvec() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side. Addition
intvec() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d5d54714e329f646bd7af4994fc427d88ee68936 - https://git.kernel.org/stable/c/d335db59f7fb3353f56e52371f1ee796ae9c8f09 - https://git.kernel.org/stable/c/630c76850d554d7140232e71b5d1663e88cffb54 - https://git.kernel.org/stable/c/4762b532ec9539755aab61445d5da6e1926ccb99
CVE ID: CVE-2022-49642 State: PUBLISHED Published: 2025-02-26T02:23:49.154Z Last Updated: 2025-05-04T08:42:25.328Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194 where random system crashes have been observed [0]. The problem occurs when the split header feature is enabled in the stmmac driver. In the bad case, a larger than expected buffer length is received and causes the calculation of the total buffer length to overflow. This results in a very large buffer length that causes the kernel to
calculation of the total buffer length to overflow. This results in a very large buffer length that causes the kernel to crash. Why this larger buffer length is received is not clear, however, the feedback from the NVIDIA design team is that the split header feature is not supported for Tegra194. Therefore, disable split header support for Tegra194 to prevent these random crashes from occurring. [0] https://lore.kernel.org/linux-tegra/b0b17697-f23e-8fa5-3757-604a86f3a095@nvidia.com/ References: - https://git.kernel.org/stable/c/2968830c9b47ce093237483c6207c61065712386 - https://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6 - https://git.kernel.org/stable/c/d5c315a787652c35
ps://git.kernel.org/stable/c/9cc8edc571b871d974b3289868553f9ce544aba6 - https://git.kernel.org/stable/c/d5c315a787652c35045044877a249f7d5c8a4104 - https://git.kernel.org/stable/c/cfa4caf3e881ad6dd366c903c34f1c7f21b857ab - https://git.kernel.org/stable/c/029c1c2059e9c4b38f97a06204cdecd10cfbeb8a
CVE ID: CVE-2022-49643 State: PUBLISHED Published: 2025-02-26T02:23:49.658Z Last Updated: 2025-10-01T19:36:48.850Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ima: Fix a potential integer overflow in ima_appraise_measurement When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/388f3df7c3c8b7f2a32b9ae0a9b2f9f6ad3b1b77 - https://git.kernel.org/stable/c/831e190175f10652be93b08436cc7bf2e62e4bb6 - https://git.kernel.org/stable/c/c8d5d81940938b5f6c0f495ca9538e
l.org/stable/c/831e190175f10652be93b08436cc7bf2e62e4bb6 - https://git.kernel.org/stable/c/c8d5d81940938b5f6c0f495ca9538e7740416f30 - https://git.kernel.org/stable/c/640cea4c2839a821adfbb703b590a5928abe9286 - https://git.kernel.org/stable/c/d2ee2cfc4aa85ff6a2a3b198a3a524ec54e3d999
CVE ID: CVE-2022-49644 State: PUBLISHED Published: 2025-02-26T02:23:50.134Z Last Updated: 2025-10-01T19:36:48.729Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() If drm_connector_init fails, intel_connector_free will be called to take care of proper free. So it is necessary to drop the refcount of port before intel_connector_free. (cherry picked from commit cea9ed611e85d36a05db52b6457bf584b7d969e2) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/72f231b9a88abcfac9f5ddaa1a0aacb3f9f87ba5 - https://git.kernel.org
ichment: References: - https://git.kernel.org/stable/c/72f231b9a88abcfac9f5ddaa1a0aacb3f9f87ba5 - https://git.kernel.org/stable/c/592f3bad00b7e2a95a6fb7a4f9e742c061c9c3c1 - https://git.kernel.org/stable/c/505114dda5bbfd07f4ce9a2df5b7d8ef5f2a1218 - https://git.kernel.org/stable/c/a91522b4279bebb098106a19b91f82b9c3213be9 - https://git.kernel.org/stable/c/85144df9ff4652816448369de76897c57cbb1b93
CVE ID: CVE-2022-49645 State: PUBLISHED Published: 2025-02-26T02:23:50.598Z Last Updated: 2025-05-04T08:42:28.901Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix shrinker list corruption by madvise IOCTL Calling madvise IOCTL twice on BO causes memory shrinker list corruption and crashes kernel because BO is already on the list and it's added to the list again, while BO should be removed from the list before it's re-added. Fix it. References: - https://git.kernel.org/stable/c/393594aad55179eb761af41533d8d1d6eb4543b0 - https://git.kernel.org/stable/c/0581613df7f9a4c5fac096ce1d5fb15b7b994240 - https://git.kernel