Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-56771 State: PUBLISHED Published: 2025-01-08T17:49:10.635Z Last Updated: 2025-10-01T19:57:25.090Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus feature an on-die Hamming-like ECC engine. There is no point in filling a ->get_status() callback for them because the main ECC status bytes are located in standard places, and retrieving the number of bitflips in case of corrected chunk is both useless and unsupported (if there are bitfli
s, and retrieving the number of bitflips in case of corrected chunk is both useless and unsupported (if there are bitflips, then there is 1 at most, so no need to query the chip for that). Without this change, a kernel warning triggers every time a bit flips. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/234d5f75c3ae911b52c5e4442b8a87fbbd129836 - https://git.kernel.org/stable/c/fee9b240916df82a8b07aef0fdfe96785417a164
CVE ID: CVE-2024-56772 State: PUBLISHED Published: 2025-01-08T17:49:11.544Z Last Updated: 2025-05-04T10:04:22.165Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_suite() In kunit_debugfs_create_suite(), if alloc_string_stream() fails in the kunit_suite_for_each_test_case() loop, the "suite->log = stream" has assigned before, and the error path only free the suite->log's stream memory but not set it to NULL, so the later string_stream_clear() of suite->log in kunit_init_suite() will cause below UAF bug. Set stream pointer to NULL after free to fix it. Unable to handle kernel pagi
nit_init_suite() will cause below UAF bug. Set stream pointer to NULL after free to fix it. Unable to handle kernel paging request at virtual address 006440150000030d Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [006440150000030d] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: iio_test_gts industrialio_gts_helper cfg80211
REEMPT SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: iio_test_gts industrialio_gts_helper cfg80211 rfkill ipv6 [last unloaded: iio_test_gts] CPU: 5 UID: 0 PID: 6253 Comm: modprobe Tainted: G B W N 6.12.0-rc4+ #458 Tainted: [B]=BAD_PAGE, [W]=WARN, [N]=TEST Hardware name: linux,dummy-virt (DT) pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : string_stream_clear+0x54/0x1ac lr : string_stream_clear+0x1a8/0x1ac sp : ffffffc080b47410 x29: ffffffc080b47410 x28: 006440550000030d x27: ffffff80c96b5e98 x26: ffffff80c96b5e80 x25: ffffffe461b3f6c0 x24: 0000000000000003 x23: ffffff80c96b5e88 x22: 1ffffff019cdf4fc x21: dfffffc000000000 x20: ffffff80ce6fa7e0 x19: 0
6c0 x24: 0000000000000003 x23: ffffff80c96b5e88 x22: 1ffffff019cdf4fc x21: dfffffc000000000 x20: ffffff80ce6fa7e0 x19: 032202a80000186d x18: 0000000000001840 x17: 0000000000000000 x16: 0000000000000000 x15: ffffffe45c355cb4 x14: ffffffe45c35589c x13: ffffffe45c03da78 x12: ffffffb810168e75 x11: 1ffffff810168e74 x10: ffffffb810168e74 x9 : dfffffc000000000 x8 : 0000000000000004 x7 : 0000000000000003 x6 : 0000000000000001 x5 : ffffffc080b473a0 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000001 x1 : ffffffe462fbf620 x0 : dfffffc000000000 Call trace: string_stream_clear+0x54/0x1ac __kunit_test_suites_init+0x108/0x1d8 kunit_exec_run_tests+0xb8/0x100 kunit_module_notify+0x400/0x55c no
clear+0x54/0x1ac __kunit_test_suites_init+0x108/0x1d8 kunit_exec_run_tests+0xb8/0x100 kunit_module_notify+0x400/0x55c notifier_call_chain+0xfc/0x3b4 blocking_notifier_call_chain+0x68/0x9c do_init_module+0x24c/0x5c8 load_module+0x4acc/0x4e90 init_module_from_file+0xd4/0x128 idempotent_init_module+0x2d4/0x57c __arm64_sys_finit_module+0xac/0x100 invoke_syscall+0x6c/0x258 el0_svc_common.constprop.0+0x160/0x22c do_el0_svc+0x44/0x5c el0_svc+0x48/0xb8 el0t_64_sync_handler+0x13c/0x158 el0t_64_sync+0x190/0x194 Code: f9400753 d2dff800 f2fbffe0 d343fe7c (38e06b80) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Oops: Fatal exception Additional Analyst Notes: - CISA ADP Vulnrichment: Re
00000000000 ]--- Kernel panic - not syncing: Oops: Fatal exception Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3213b92754b94dec6836e8b4d6ec7d224a805b61 - https://git.kernel.org/stable/c/39e21403c978862846fa68b7f6d06f9cca235194
CVE ID: CVE-2024-56773 State: PUBLISHED Published: 2025-01-08T17:49:12.275Z Last Updated: 2025-10-01T19:57:24.967Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_device_driver_test() kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for test_state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5d28fac59369b5d3c48cdf09e50275a61ff91202 - https://git.kernel.org/stable/c/435c20eed572a95709b1536ff78832836b2f91b1
CVE ID: CVE-2024-56774 State: PUBLISHED Published: 2025-01-08T17:49:13.121Z Last Updated: 2025-11-03T20:54:09.775Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr-deref in btrfs_search_slot(). The reproducer is using rescue=ibadroots, and the extent tree root is corrupted thus the extent tree is NULL. When scrub tries to search the extent tree to gather the needed extent info, btrfs_search_slot() doesn't check if the target root is NULL or not, resulting the null-ptr-deref. Add sanity check for btrfs root before using it in btrfs_search_slo
t root is NULL or not, resulting the null-ptr-deref. Add sanity check for btrfs root before using it in btrfs_search_slot(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c71d114ef68c95da5a82ec85a721ab31f5bd905b - https://git.kernel.org/stable/c/db66fb87c21e8ae724886e6a464dcbac562a64c6 - https://git.kernel.org/stable/c/757171d1369b3b47f36932d40a05a0715496dcab - https://git.kernel.org/stable/c/93992c3d9629b02dccf6849238559d5c24f2dece - https://git.kernel.org/stable/c/3ed51857a50f530ac7a1482e069dfbd1298558d4
CVE ID: CVE-2024-56775 State: PUBLISHED Published: 2025-01-08T17:49:13.907Z Last Updated: 2025-10-01T19:57:24.727Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [Why] The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations, such as memory leaks if the refcount was supposed to go down, or double frees / invalid memory accesses if the refcount was supposed to go up. [How] Cache and re-apply current refcount when restoring plane states. Additional Analyst Notes: -
as supposed to go up. [How] Cache and re-apply current refcount when restoring plane states. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8cb2f6793845f135b28361ba8e96901cae3e5790 - https://git.kernel.org/stable/c/27227a234c1487cb7a684615f0749c455218833a
CVE ID: CVE-2024-56776 State: PUBLISHED Published: 2025-01-08T17:49:14.622Z Last Updated: 2025-11-03T20:54:11.160Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e98ff67f5a68114804607de549c2350d27628fc7 - https://git.kernel.org/stable/c/40725c5fabee804fecce41d4d5c5bae80c45e1c4 - https://git.kernel.org/stable/c/8ab73ac97c
- https://git.kernel.org/stable/c/40725c5fabee804fecce41d4d5c5bae80c45e1c4 - https://git.kernel.org/stable/c/8ab73ac97c0fa528f66eeccd9bb53eb6eb7d20dc - https://git.kernel.org/stable/c/f67786293193cf01ebcc6fdbcbd1587b24f52679 - https://git.kernel.org/stable/c/831214f77037de02afc287eae93ce97f218d8c04
CVE ID: CVE-2024-56777 State: PUBLISHED Published: 2025-01-08T17:49:15.483Z Last Updated: 2025-11-03T20:54:12.562Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f5804567cf9605d6e5ec46c0bb786f7d50f18c13 - https://git.kernel.org/stable/c/b79612ed6bc1a184c45427105c851b5b2d4342ca - https://git.kernel
e5ec46c0bb786f7d50f18c13 - https://git.kernel.org/stable/c/b79612ed6bc1a184c45427105c851b5b2d4342ca - https://git.kernel.org/stable/c/997b64c3f4c1827c5cfda8ae7f5d13f78d28b541 - https://git.kernel.org/stable/c/3cf2e7c448e246f7e700c7aa47450d1e27579559 - https://git.kernel.org/stable/c/e965e771b069421c233d674c3c8cd8c7f7245f42
CVE ID: CVE-2024-56778 State: PUBLISHED Published: 2025-01-08T17:49:16.207Z Last Updated: 2025-11-03T20:54:13.948Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check The return value of drm_atomic_get_crtc_state() needs to be checked. To avoid use of error pointer 'crtc_state' in case of the failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/31c857e7496d34e5a32a6f75bc024d0b06fd646a - https://git.kernel.org/stable/c/6b0d0d6e9d3c26697230bf7dc9e6b52bdb24086f - https://git.kern
e5a32a6f75bc024d0b06fd646a - https://git.kernel.org/stable/c/6b0d0d6e9d3c26697230bf7dc9e6b52bdb24086f - https://git.kernel.org/stable/c/82a5312f874fb18f045d9658e9bd290e3b0621c0 - https://git.kernel.org/stable/c/837eb99ad3340c7a9febf454f41c8e3edb68ac1e - https://git.kernel.org/stable/c/c1ab40a1fdfee732c7e6ff2fb8253760293e47e8
CVE ID: CVE-2024-56779 State: PUBLISHED Published: 2025-01-08T17:49:17.070Z Last Updated: 2025-11-03T20:54:16.750Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt to kill all rpc_task even umount operation may ultimately fail if some files remain open. Consequently, if an action attempts to open a file, it can potentially send two rpc_task to nfs server. NFS CLIENT thread1 thread2 open("file") ... nfs4_do_open _nfs4_do_open _nfs4_open_and_get_state _nfs4_proc_open nfs4_run_open_task /* rpc_task1 */ rpc_run_task rpc_wait
_do_open _nfs4_do_open _nfs4_open_and_get_state _nfs4_proc_open nfs4_run_open_task /* rpc_task1 */ rpc_run_task rpc_wait_for_completion_task umount -f nfs_umount_begin rpc_killall_tasks rpc_signal_task rpc_task1 been wakeup and return -512 _nfs4_do_open // while loop ... nfs4_run_open_task /* rpc_task2 */ rpc_run_task rpc_wait_for_completion_task While processing an open request, nfsd will first attempt to find or allocate an nfs4_openowner. If it finds an nfs4_openowner that is not marked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since two rpc_task can attempt to open the same file simultaneously from the client to server, and because two instances of nfsd can run concurrentl
pt to open the same file simultaneously from the client to server, and because two instances of nfsd can run concurrently, this situation can lead to lots of memory leak. Additionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be triggered. NFS SERVER nfsd1 nfsd2 echo 0 > /proc/fs/nfsd/threads nfsd4_open nfsd4_process_open1 find_or_alloc_open_stateowner // alloc oo1, stateid1 nfsd4_open nfsd4_process_open1 find_or_alloc_open_stateowner // find oo1, without NFS4_OO_CONFIRMED release_openowner unhash_openowner_locked list_del_init(&oo->oo_perclient) // cannot find this oo // from client, LEAK!!! alloc_stateowner // alloc oo2 nfsd4_process_open2 init_open_stateid // associate oo1 //
this oo // from client, LEAK!!! alloc_stateowner // alloc oo2 nfsd4_process_open2 init_open_stateid // associate oo1 // with stateid1, stateid1 LEAK!!! nfs4_get_vfs_file // alloc nfsd_file1 and nfsd_file_mark1 // all LEAK!!! nfsd4_process_open2 ... write_threads ... nfsd_destroy_serv nfsd_shutdown_net nfs4_state_shutdown_net nfs4_state_destroy_net destroy_client __destroy_client // won't find oo1!!! nfsd_shutdown_generic nfsd_file_cache_shutdown kmem_cache_destroy for nfsd_file_slab and nfsd_file_mark_slab // bark since nfsd_file1 // and nfsd_file_mark1 // still alive ======================================================================= BUG nfsd_file (Not tainted): Objects remaining in nf
=================================================================== BUG nfsd_file (Not tainted): Objects remaining in nfsd_file on __kmem_cache_shutdown() ----------------------------------------------------------------------- Slab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28 flags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff) CPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 Call Trace: <TASK> dum ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a85364f0d30dee01c5d5b4afa55a9
A ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a85364f0d30dee01c5d5b4afa55a9629a8f36d8e - https://git.kernel.org/stable/c/2d505a801e57428057563762f67a5a62009b2600 - https://git.kernel.org/stable/c/0ab0a3ad24e970e894abcac58f85c332d1726749 - https://git.kernel.org/stable/c/45abb68c941ebc9a35c6d3a7b08196712093c636 - https://git.kernel.org/stable/c/37dfc81266d3a32294524bfadd3396614f8633ee - https://git.kernel.org/stable/c/6f73f920b7ad0084373e46121d7ac34117aed652 - https://git.kernel.org/stable/c/98100e88dd8865999dc6379a3356cd799795fe7b
CVE ID: CVE-2024-56780 State: PUBLISHED Published: 2025-01-08T17:49:17.889Z Last Updated: 2025-11-03T20:54:19.790Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_filesystem() ext4_sync_fs() dquot_writeback_dquots() Since we currently don't always flush the quota_release_work queue in this path, we can end up with the following race: 1. dquot are added to releasing_dquots list during regular operations. 2. FS Freeze starts, however, this does not flush the quota_release_work queue. 3. Freeze completes. 4.
lar operations. 2. FS Freeze starts, however, this does not flush the quota_release_work queue. 3. Freeze completes. 4. Kernel eventually tries to flush the workqueue while FS is frozen which hits a WARN_ON since transaction gets started during frozen state: ext4_journal_check_start+0x28/0x110 [ext4] (unreliable) __ext4_journal_start_sb+0x64/0x1c0 [ext4] ext4_release_dquot+0x90/0x1d0 [ext4] quota_release_workfn+0x43c/0x4d0 Which is the following line: WARN_ON(sb->s_writers.frozen == SB_FREEZE_COMPLETE); Which ultimately results in generic/390 failing due to dmesg noise. This was detected on powerpc machine 15 cores. To avoid this, make sure to flush the workqueue during dquot_writeback_dquot
s was detected on powerpc machine 15 cores. To avoid this, make sure to flush the workqueue during dquot_writeback_dquots() so we dont have any pending workitems after freeze. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a5abba5e0e586e258ded3e798fe5f69c66fec198 - https://git.kernel.org/stable/c/6f3821acd7c3143145999248087de5fb4b48cf26 - https://git.kernel.org/stable/c/ab6cfcf8ed2c7496f55d020b65b1d8cd55d9a2cb - https://git.kernel.org/stable/c/3e6ff207cd5bd924ad94cd1a7c633bcdac0ba1cb - https://git.kernel.org/stable/c/bcacb52a985f1b6d280f698a470b873dfe52728a - https://git.kernel.org/stable/c/8ea87e34792258825d290f4dc52
rnel.org/stable/c/bcacb52a985f1b6d280f698a470b873dfe52728a - https://git.kernel.org/stable/c/8ea87e34792258825d290f4dc5216276e91cb224 - https://git.kernel.org/stable/c/ac6f420291b3fee1113f21d612fa88b628afab5b
CVE ID: CVE-2024-56781 State: PUBLISHED Published: 2025-01-08T17:51:57.856Z Last Updated: 2025-11-03T20:54:21.215Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/prom_init: Fixup missing powermac #size-cells On some powermacs `escc` nodes are missing `#size-cells` properties, which is deprecated and now triggers a warning at boot since commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling"). For example: Missing '#size-cells' in /pci@f2000000/mac-io@c/escc@13000 WARNING: CPU: 0 PID: 0 at drivers/of/base.c:133 of_bus_n_size_cells+0x98/0x108 Hardware name: PowerMac3,1 7400 0xc0209 PowerMac ... C
0 PID: 0 at drivers/of/base.c:133 of_bus_n_size_cells+0x98/0x108 Hardware name: PowerMac3,1 7400 0xc0209 PowerMac ... Call Trace: of_bus_n_size_cells+0x98/0x108 (unreliable) of_bus_default_count_cells+0x40/0x60 __of_get_address+0xc8/0x21c __of_address_to_resource+0x5c/0x228 pmz_init_port+0x5c/0x2ec pmz_probe.isra.0+0x144/0x1e4 pmz_console_init+0x10/0x48 console_init+0xcc/0x138 start_kernel+0x5c4/0x694 As powermacs boot via prom_init it's possible to add the missing properties to the device tree during boot, avoiding the warning. Note that `escc-legacy` nodes are also missing `#size-cells` properties, but they are skipped by the macio driver, so leave them alone. Depends-on: 045b14ca5c36 ("o
ng `#size-cells` properties, but they are skipped by the macio driver, so leave them alone. Depends-on: 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling") Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0b94d838018fb0a824e0cd3149034928c99fb1b7 - https://git.kernel.org/stable/c/a79a7e3c03ae2a07f68b5f24d5ed549f9799ec89 - https://git.kernel.org/stable/c/ee68554d2c03e32077f7b984e5289fdb005036d2 - https://git.kernel.org/stable/c/6d5f0453a2228607333bff0c85238a3cb495d194 - https://git.kernel.org/stable/c/691284c2cd33ffaa0b35ce53b3286b90621e9dc9 - https://git.kernel.org/stable/c/296a109fa77110ba5267fe0
t.kernel.org/stable/c/691284c2cd33ffaa0b35ce53b3286b90621e9dc9 - https://git.kernel.org/stable/c/296a109fa77110ba5267fe0e90a26005eecc2726 - https://git.kernel.org/stable/c/cf89c9434af122f28a3552e6f9cc5158c33ce50a
CVE ID: CVE-2024-56782 State: PUBLISHED Published: 2025-01-08T17:51:58.768Z Last Updated: 2025-10-01T19:57:23.697Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() acpi_dev_hid_match() does not check for adev == NULL, dereferencing it unconditional. Add a check for adev being NULL before calling acpi_dev_hid_match(). At the moment acpi_quirk_skip_serdev_enumeration() is never called with a controller_parent without an ACPI companion, but better safe than sorry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e17
er safe than sorry. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e173bce05f7032a8b4964cfef82a4b7668f5f3af - https://git.kernel.org/stable/c/4a49194f587a62d972b602e3e1a2c3cfe6567966
CVE ID: CVE-2024-56783 State: PUBLISHED Published: 2025-01-08T17:51:59.704Z Last Updated: 2025-11-03T20:54:22.599Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level cgroup maximum depth is INT_MAX by default, there is a cgroup toggle to restrict this maximum depth to a more reasonable value not to harm performance. Remove unnecessary WARN_ON_ONCE which is reachable from userspace. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7064a6daa4a700a298fe3aee11dea296bfe59fc4 - https://git.kernel.org
ntainer: References: - https://git.kernel.org/stable/c/7064a6daa4a700a298fe3aee11dea296bfe59fc4 - https://git.kernel.org/stable/c/2f9bec0a749eb646b384fde0c7b7c24687b2ffae - https://git.kernel.org/stable/c/e227c042580ab065edc610c9ddc9bea691e6fc4d - https://git.kernel.org/stable/c/b7529880cb961d515642ce63f9d7570869bbbdc3
CVE ID: CVE-2024-56784 State: PUBLISHED Published: 2025-01-08T17:52:00.503Z Last Updated: 2025-10-01T19:57:23.425Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to prevent memory corruption [Why & How] Array indices out of bound caused memory corruption. Adding checks to ensure that array index stays in bound. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/dff526dc3e27f5484f5ba11471b9fbbe681467f2 - https://git.kernel.org/stable/c/2c437d9a0b496168e1a1defd17b531f0a526dbe9
CVE ID: CVE-2024-56785 State: PUBLISHED Published: 2025-01-08T17:52:01.312Z Last Updated: 2025-11-03T20:54:23.999Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a Fix the dtc warnings: arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning (interrupt_provider): /bus@10000000/pci@1a000000: '#interrupt-cells' found, but node is not an interrupt provider arch/mips/boot/dts/loongson/ls7a-pch.dtsi:68.16-416.5: Warning (interrupt_provider): /bus@10000000/pci@1a000000: '#interrupt-cells' found, but node is not an interrupt provider arch/mips/boot/dts/loongson/loongson64
000/pci@1a000000: '#interrupt-cells' found, but node is not an interrupt provider arch/mips/boot/dts/loongson/loongson64g_4core_ls7a.dtb: Warning (interrupt_map): Failed prerequisite 'interrupt_provider' And a runtime warning introduced in commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling"): WARNING: CPU: 0 PID: 1 at drivers/of/base.c:106 of_bus_n_addr_cells+0x9c/0xe0 Missing '#address-cells' in /bus@10000000/pci@1a000000/pci_bridge@9,0 The fix is similar to commit d89a415ff8d5 ("MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a"), which has fixed the issue for ls2k (despite its subject mentions ls7a). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
fixed the issue for ls2k (despite its subject mentions ls7a). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/5a2eaa3ad2b803c7ea442c6db7379466ee73c024 - https://git.kernel.org/stable/c/a7fd78075031871bc68fc56fdaa6e7a3934064b1 - https://git.kernel.org/stable/c/c8ee41fc3522c6659e324d90bc2ccd3b6310d7fc - https://git.kernel.org/stable/c/8ef9ea1503d0a129cc6f5cf48fb63633efa5d766 - https://git.kernel.org/stable/c/01575f2ff8ba578a3436f230668bd056dc2eb823 - https://git.kernel.org/stable/c/4fbd66d8254cedfd1218393f39d83b6c07a01917
CVE ID: CVE-2024-56786 State: REJECTED Published: 2025-01-08T17:52:02.435Z Last Updated: 2025-06-19T12:46:14.840Z Description: No description available.