Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
3d097503a90cf84ebe120afcde37e9c33b3 - https://git.kernel.org/stable/c/064852663308c801861bd54789d81421fa4c2928 - https://git.kernel.org/stable/c/ce3731c61589ed73364a5b55ce34131762ef9b60 - https://git.kernel.org/stable/c/46deb91ac8a790286ad6d24cf92e7ab0ab2582bb - https://git.kernel.org/stable/c/a11e5b3e7a59fde1a90b0eaeaa82320495cf8cae
CVE ID: CVE-2022-49572 State: PUBLISHED Published: 2025-02-26T02:23:14.667Z Last Updated: 2025-10-01T19:46:37.162Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. While reading sysctl_tcp_slow_start_after_idle, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3b26e11b07a09b31247688bec61e2925d4a571b6 - https://git.kernel.org/stable/c/369d99c2b89f54473adcf9acdf40ea562b5a6e0e - https://git.kernel.org/stable/c/0e3f82a03ec8c3808e87283e129462274157
stable/c/369d99c2b89f54473adcf9acdf40ea562b5a6e0e - https://git.kernel.org/stable/c/0e3f82a03ec8c3808e87283e12946227415706c9 - https://git.kernel.org/stable/c/41aeba4506f6b70ec7500c6fe202731a4ba29fe5 - https://git.kernel.org/stable/c/68b6f9506747d507c7bfa374d178929b4157e8c6 - https://git.kernel.org/stable/c/4845b5713ab18a1bb6e31d1fbb4d600240b8b691
CVE ID: CVE-2022-49573 State: PUBLISHED Published: 2025-02-26T02:23:15.157Z Last Updated: 2025-10-01T19:46:36.989Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_early_retrans. While reading sysctl_tcp_early_retrans, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/488d3ad98ef7cddce7054193dbae6b4349c6807d - https://git.kernel.org/stable/c/83767fe800a311370330d4ec83aa76093b744a80 - https://git.kernel.org/stable/c/11e8b013d16e5db63f8f76acceb5b86964098aaa - https://g
800a311370330d4ec83aa76093b744a80 - https://git.kernel.org/stable/c/11e8b013d16e5db63f8f76acceb5b86964098aaa - https://git.kernel.org/stable/c/5037ca9e4b169cc9aed0174d658c3d81fdaf8ea5 - https://git.kernel.org/stable/c/d5975f6376ce90c2c483ae36bf88c9cface4c13b - https://git.kernel.org/stable/c/52e65865deb6a36718a463030500f16530eaab74
CVE ID: CVE-2022-49574 State: PUBLISHED Published: 2025-02-26T02:23:15.644Z Last Updated: 2025-10-01T19:46:36.791Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_recovery. While reading sysctl_tcp_recovery, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c7a492db1f7c37c758a66915908677bd8bc5d368 - https://git.kernel.org/stable/c/92c35113c63306091df9211375eebd0abd8c2160 - https://git.kernel.org/stable/c/d8781f7cd04091744f474a2bada74772084b9dc9 - https://git.kernel.
df9211375eebd0abd8c2160 - https://git.kernel.org/stable/c/d8781f7cd04091744f474a2bada74772084b9dc9 - https://git.kernel.org/stable/c/a31e2d0cb5cfa2aae3144cac04f25031d5d20fb4 - https://git.kernel.org/stable/c/52ee7f5c4811ce6be1becd14d38ba1f8a8a0df81 - https://git.kernel.org/stable/c/e7d2ef837e14a971a05f60ea08c47f3fed1a36e4
CVE ID: CVE-2022-49575 State: PUBLISHED Published: 2025-02-26T02:23:16.142Z Last Updated: 2025-10-01T19:46:36.600Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. While reading sysctl_tcp_thin_linear_timeouts, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f4b0295be9a3c4260de4585fac4062e602a88ac7 - https://git.kernel.org/stable/c/492f3713b282c0e67e951cd804edd22eccc25412 - https://git.kernel.org/stable/c/cc133e4f4bc225079198192623945bb872c081
able/c/492f3713b282c0e67e951cd804edd22eccc25412 - https://git.kernel.org/stable/c/cc133e4f4bc225079198192623945bb872c08143 - https://git.kernel.org/stable/c/404c53ccdebd11f96954f4070cffac8e0b4d5cb6 - https://git.kernel.org/stable/c/a0f96c4f179cb3560078cefccef105e8f1701210 - https://git.kernel.org/stable/c/7c6f2a86ca590d5187a073d987e9599985fb1c7c
CVE ID: CVE-2022-49576 State: PUBLISHED Published: 2025-02-26T02:23:16.629Z Last Updated: 2025-10-01T19:36:55.400Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. While reading sysctl_fib_multipath_hash_fields, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/36f5b86f309b3b11295d087cd7433f1c897caf94 - https://git.kernel.org/stable/c/548d6678c4a3d43667e59686665f8674b82440a3 - https://git.kernel.org/stable/c/8895a9c2ac76fb9d3922fed4fe092c8ec5e
/stable/c/548d6678c4a3d43667e59686665f8674b82440a3 - https://git.kernel.org/stable/c/8895a9c2ac76fb9d3922fed4fe092c8ec5e5cccc
CVE ID: CVE-2022-49577 State: PUBLISHED Published: 2025-02-26T02:23:17.120Z Last Updated: 2025-10-01T19:36:55.116Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f39b03bd727a8fea62e82f10fe2e0d753b9930ff - https://git.kernel.org/stable/c/fcaef69c79ec222e55643e666b80b221e70fa6a8 - https://git.kernel.org/stable/c/3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c - https://g
c79ec222e55643e666b80b221e70fa6a8 - https://git.kernel.org/stable/c/3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c - https://git.kernel.org/stable/c/cb0d28934ca10f99c47e2c6f451405d6c954fe48 - https://git.kernel.org/stable/c/3d72bb4188c708bb16758c60822fc4dda7a95174
CVE ID: CVE-2022-49578 State: PUBLISHED Published: 2025-02-26T02:23:17.659Z Last Updated: 2025-10-01T19:36:54.947Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_prot_sock. sysctl_ip_prot_sock is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9add240f76af6d141d2eebd3a1558a0e503a993d - https://git.kernel.org/stable/c/95724fe897a4ecf2be51452ef96e818568071664 - https://git.kernel.org/stable/c/ef6998
993d - https://git.kernel.org/stable/c/95724fe897a4ecf2be51452ef96e818568071664 - https://git.kernel.org/stable/c/ef699813d99cc29e6e25c9f6da7766526cc8bd6e - https://git.kernel.org/stable/c/9b55c20f83369dd54541d9ddbe3a018a8377f451
CVE ID: CVE-2022-49579 State: PUBLISHED Published: 2025-02-26T02:23:18.163Z Last Updated: 2025-10-01T19:36:54.818Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049 - https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6 - https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d
/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6 - https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a
CVE ID: CVE-2022-49580 State: PUBLISHED Published: 2025-02-26T02:23:18.667Z Last Updated: 2025-10-01T19:36:54.699Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. While reading sysctl_fib_multipath_use_neigh, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6727f39e99e0f545d815edebb6c94228485427ec - https://git.kernel.org/stable/c/e045d672ba06e1d35bacb56374d350de0ac99066 - https://git.kernel.org/stable/c/b8d345db03b4deffb4f04219a51d3b1e94171b7
ble/c/e045d672ba06e1d35bacb56374d350de0ac99066 - https://git.kernel.org/stable/c/b8d345db03b4deffb4f04219a51d3b1e94171b76 - https://git.kernel.org/stable/c/14e996577ed2799a1ed6ffeb71c76d63acb28444 - https://git.kernel.org/stable/c/87507bcb4f5de16bb419e9509d874f4db6c0ad0f
CVE ID: CVE-2022-49581 State: PUBLISHED Published: 2025-02-26T02:23:19.148Z Last Updated: 2025-05-04T08:41:06.565Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in be_get_module_eeprom be_cmd_read_port_transceiver_data assumes that it is given a buffer that is at least PAGE_DATA_LEN long, or twice that if the module supports SFF 8472. However, this is not always the case. Fix this by passing the desired offset and length to be_cmd_read_port_transceiver_data so that we only copy the bytes once. References: - https://git.kernel.org/stable/c/a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9 - https://git.kernel
bytes once. References: - https://git.kernel.org/stable/c/a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9 - https://git.kernel.org/stable/c/fe4473fc7940f14c4a12db873b9729134c212654 - https://git.kernel.org/stable/c/8ff4f9df73e5c551a72ee6034886c17e8de6596d - https://git.kernel.org/stable/c/a8569f76df7ec5b4b51155c57523a0b356db5741 - https://git.kernel.org/stable/c/665cbe91de2f7c97c51ca8fce39aae26477c1948 - https://git.kernel.org/stable/c/aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f - https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10 - https://git.kernel.org/stable/c/d7241f679a59cfe27f92cb5c6272cb429fb1f7ec
CVE ID: CVE-2022-49582 State: PUBLISHED Published: 2025-02-26T02:23:19.626Z Last Updated: 2025-10-01T19:36:54.585Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering The "ds" iterator variable used in dsa_port_reset_vlan_filtering() -> dsa_switch_for_each_port() overwrites the "dp" received as argument, which is later used to call dsa_port_vlan_filtering() proper. As a result, switches which do enter that code path (the ones with vlan_filtering_is_global=true) will dereference an invalid dp in dsa_port_reset_vlan_filtering() after leaving a VLAN-aware bridge. U
g_is_global=true) will dereference an invalid dp in dsa_port_reset_vlan_filtering() after leaving a VLAN-aware bridge. Use a dedicated "other_dp" iterator variable to avoid this from happening. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3240e12fe203a3a79b9814e83327106b770ed7b0 - https://git.kernel.org/stable/c/1699b4d502eda3c7ea4070debad3ee570b5091b1
CVE ID: CVE-2022-49583 State: PUBLISHED Published: 2025-02-26T02:23:20.108Z Last Updated: 2025-10-01T19:36:54.463Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy receive descriptor properly. iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive descriptors. Without this patch, when the hardware writes a dummy descriptor, iavf would not free the page allocated for the previous receive buffer. This is an unlikely event but can still happen. [Jesse: massaged commit message] Additional Analyst Notes: - CISA ADP Vulnrichme
an unlikely event but can still happen. [Jesse: massaged commit message] Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d88d59faf4e6f9cc4767664206afdb999b10ec77 - https://git.kernel.org/stable/c/c6af94324911ef0846af1a5ce5e049ca736db34b - https://git.kernel.org/stable/c/2918419c06088f6709ceb543feb01752779ade4c - https://git.kernel.org/stable/c/6edb818732fc05fda495f5b3a749bd1cee01398b - https://git.kernel.org/stable/c/a9f49e0060301a9bfebeca76739158d0cf91cdf6
CVE ID: CVE-2022-49584 State: PUBLISHED Published: 2025-02-26T02:23:20.600Z Last Updated: 2025-05-04T08:41:10.383Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero It is possible to disable VFs while the PF driver is processing requests from the VF driver. This can result in a panic. BUG: unable to handle kernel paging request at 000000000000106c PGD 0 P4D 0 Oops: 0000 [#1] SMP NOPTI CPU: 8 PID: 0 Comm: swapper/8 Kdump: loaded Tainted: G I --------- - Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020 RIP: 0010:ixgbe_msg_task+0x4c8/0x1690 [ix
------ - Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020 RIP: 0010:ixgbe_msg_task+0x4c8/0x1690 [ixgbe] Code: 00 00 48 8d 04 40 48 c1 e0 05 89 7c 24 24 89 fd 48 89 44 24 10 83 ff 01 0f 84 b8 04 00 00 4c 8b 64 24 10 4d 03 a5 48 22 00 00 <41> 80 7c 24 4c 00 0f 84 8a 03 00 00 0f b7 c7 83 f8 08 0f 84 8f 0a RSP: 0018:ffffb337869f8df8 EFLAGS: 00010002 RAX: 0000000000001020 RBX: 0000000000000000 RCX: 000000000000002b RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000006 RBP: 0000000000000006 R08: 0000000000000002 R09: 0000000000029780 R10: 00006957d8f42832 R11: 0000000000000000 R12: 0000000000001020 R13: ffff8a00e8978ac0 R14: 000000000000002b R15: ffff8a00e8979c80 F
d8f42832 R11: 0000000000000000 R12: 0000000000001020 R13: ffff8a00e8978ac0 R14: 000000000000002b R15: ffff8a00e8979c80 FS: 0000000000000000(0000) GS:ffff8a07dfd00000(0000) knlGS:00000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000106c CR3: 0000000063e10004 CR4: 00000000007726e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <IRQ> ? ttwu_do_wakeup+0x19/0x140 ? try_to_wake_up+0x1cd/0x550 ? ixgbevf_update_xcast_mode+0x71/0xc0 [ixgbevf] ixgbe_msix_other+0x17e/0x310 [ixgbe] __handle_irq_event_percpu+0x40/0x180 handle_irq_event_percpu+0x30/0x80 handle_irq_eve
gbe_msix_other+0x17e/0x310 [ixgbe] __handle_irq_event_percpu+0x40/0x180 handle_irq_event_percpu+0x30/0x80 handle_irq_event+0x36/0x53 handle_edge_irq+0x82/0x190 handle_irq+0x1c/0x30 do_IRQ+0x49/0xd0 common_interrupt+0xf/0xf This can be eventually be reproduced with the following script: while : do echo 63 > /sys/class/net/<devname>/device/sriov_numvfs sleep 1 echo 0 > /sys/class/net/<devname>/device/sriov_numvfs sleep 1 done Add lock when disabling SR-IOV to prevent process VF mailbox communication. References: - https://git.kernel.org/stable/c/031af9e617a6f51075d97e56fc9e712c7dde2508 - https://git.kernel.org/stable/c/b82de63f8f817b5735480293dda8e92ba8170c52 - https://git.kernel.org/stable/c/
2c7dde2508 - https://git.kernel.org/stable/c/b82de63f8f817b5735480293dda8e92ba8170c52 - https://git.kernel.org/stable/c/16f929a5e76fd047fd8697e1e568bdd7d771955c - https://git.kernel.org/stable/c/9d925d2dc82cec2bcbd8625457645d8a548ab22e - https://git.kernel.org/stable/c/1e53834ce541d4fe271cdcca7703e50be0a44f8a
CVE ID: CVE-2022-49585 State: PUBLISHED Published: 2025-02-26T02:23:21.085Z Last Updated: 2025-10-01T19:36:54.317Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. While reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0dc2f19d8c2636cebda7976b5ea40c6d69f0d891 - https://git.kernel.org/stable/c/a77a75a0e7f397550ab039f96115103e78dd5c69 - https://git.kernel.org/stable/c/8afa5604e295046c02b79ccf9e
ernel.org/stable/c/a77a75a0e7f397550ab039f96115103e78dd5c69 - https://git.kernel.org/stable/c/8afa5604e295046c02b79ccf9e2bbbf8d969d60e - https://git.kernel.org/stable/c/021266ec640c7a4527e6cd4b7349a512b351de1d
CVE ID: CVE-2022-49586 State: PUBLISHED Published: 2025-02-26T02:23:21.568Z Last Updated: 2025-10-01T19:36:54.157Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/03da610696a32578fc4f986479341ce9d430df08 - https://git.kernel.org/stable/c/25d53d858a6c0b89a6e69e376c2a57c4f4c2c8cc - https://git.kernel.org/stable/c/22938534c611136f35e2ca545bb668073ca5ef49 - https://git.kernel.
6e69e376c2a57c4f4c2c8cc - https://git.kernel.org/stable/c/22938534c611136f35e2ca545bb668073ca5ef49 - https://git.kernel.org/stable/c/539d9ab79eba3974b479cad61a8688c41fe62e12 - https://git.kernel.org/stable/c/448ab998947996a0a451f8229f19087964cf2670 - https://git.kernel.org/stable/c/5a54213318c43f4009ae158347aa6016e3b9b55a
CVE ID: CVE-2022-49587 State: PUBLISHED Published: 2025-02-26T02:23:22.049Z Last Updated: 2025-10-01T19:36:54.035Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/91e21df688f8a75255ca9c459da39ac96300113a - https://git.kernel.org/stable/c/c1b85c5a34294f7444c13bf828e0e84b0a0eed85 - https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13 - https://g
a34294f7444c13bf828e0e84b0a0eed85 - https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13 - https://git.kernel.org/stable/c/e9362a993886613ef0284c2a4911c6017c97d803 - https://git.kernel.org/stable/c/fd6f1284e380c377932186042ff0b5c987fb2b92 - https://git.kernel.org/stable/c/80d4d0c461674eea87f0977e12a2ecd334b9b79c - https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64a - https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3
CVE ID: CVE-2022-49588 State: PUBLISHED Published: 2025-02-26T02:23:22.529Z Last Updated: 2025-10-01T19:36:53.900Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_migrate_req. While reading sysctl_tcp_migrate_req, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1 - https://git.kernel.org/stable/c/6e569a11eea20a1ccebc3c4e6366bf0574a449e1 - https://git.kernel.org/stable/c/4177f545895b1da08447a80692f30617154efa6e
CVE ID: CVE-2022-49589 State: PUBLISHED Published: 2025-02-26T02:23:23.070Z Last Updated: 2025-10-01T19:36:53.760Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_qrv. While reading sysctl_igmp_qrv, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. qrv ?: READ_ONCE(net->ipv4.sysctl_igmp_qrv); Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9eeb3a7702998bdccbfcc37997b5dd9215b9a7f7 - https://g
ISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9eeb3a7702998bdccbfcc37997b5dd9215b9a7f7 - https://git.kernel.org/stable/c/e20dd1b0e0ea15bee1e528536a0840dba972ca0e - https://git.kernel.org/stable/c/b399ffafffba39f47b731b26a5da1dc0ffc4b3ad - https://git.kernel.org/stable/c/c721324afc589f8ea54bae04756b150aeaae5fa4 - https://git.kernel.org/stable/c/c2954671010cd1127d1ffa328c6e6f8e99930982 - https://git.kernel.org/stable/c/8ebcc62c738f68688ee7c6fec2efe5bc6d3d7e60
CVE ID: CVE-2022-49590 State: PUBLISHED Published: 2025-02-26T02:23:23.604Z Last Updated: 2025-10-01T19:36:53.642Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. While reading sysctl_igmp_llm_reports, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. if (ipv4_is_local_multicast(pmc->multiaddr) && !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports)) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.
net->ipv4.sysctl_igmp_llm_reports)) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a84b4afaca2573ed3aed1f8854aefe3ca5a82e72 - https://git.kernel.org/stable/c/d77969e7d4ccc26bf1f414a39ef35050a83ba6d5 - https://git.kernel.org/stable/c/ed876e99ccf417b8bd7fd8408ba5e8b008e46cc8 - https://git.kernel.org/stable/c/1656ecaddf90e2a070ec2d2404cdae3edf80faca - https://git.kernel.org/stable/c/473aad9ad57ff760005377e6f45a2ad4210e08ce - https://git.kernel.org/stable/c/260446eb8e5541402b271343a4516f2b33dec1e4 - https://git.kernel.org/stable/c/46307adceb67bdf2ec38408dd9cebc378a6b5c46 - https://git.kernel.org/stable/c/f6da2267e71106474fbc0943dc24928b9cb79119
CVE ID: CVE-2022-49591 State: PUBLISHED Published: 2025-02-26T02:23:24.078Z Last Updated: 2025-10-01T19:36:53.528Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: ksz_common: Fix refcount leak bug In ksz_switch_register(), we should call of_node_put() for the reference returned by of_get_child_by_name() which has increased the refcount. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/88ec2ff42da3ac93b2437dc52fe25cd4372148e6 - https://git.kernel.org/stable/c/4165e02716518bbbe9c9104b39530d40928bc7ce - https://git.kernel.org/stable/c/a14bd7475452c51835dd5a0cee4c8
el.org/stable/c/4165e02716518bbbe9c9104b39530d40928bc7ce - https://git.kernel.org/stable/c/a14bd7475452c51835dd5a0cee4c8fa48dd0b539
CVE ID: CVE-2022-49592 State: PUBLISHED Published: 2025-02-26T02:23:24.552Z Last Updated: 2025-05-04T08:41:21.229Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma queue left shift overflow issue When queue number is > 4, left shift overflows due to 32 bits integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1. If CONFIG_UBSAN is enabled, kernel dumps below warning: [ 10.363842] ================================================================== [ 10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/ linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core
nds in /build/linux-intel-iotg-5.15-8e6Tf4/ linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12 [ 10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int' [ 10.363953] CPU: 1 PID: 599 Comm: NetworkManager Not tainted 5.15.0-1003-intel-iotg [ 10.363956] Hardware name: ADLINK Technology Inc. LEC-EL/LEC-EL, BIOS 0.15.11 12/22/2021 [ 10.363958] Call Trace: [ 10.363960] <TASK> [ 10.363963] dump_stack_lvl+0x4a/0x5f [ 10.363971] dump_stack+0x10/0x12 [ 10.363974] ubsan_epilogue+0x9/0x45 [ 10.363976] __ubsan_handle_shift_out_of_bounds.cold+0x61/0x10e [ 10.363979] ? wake_up_klogd+0x4a/0x50 [ 10.363983] ? vprintk_emit+0x8f/0x240 [ 10.363986] dwmac4_map_