Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
v 4.0 on 5.3.1.4.1 D3hot State. > Configuration and Message requests are the only TLPs accepted by a Function in > the D3hot state. All other received Requests must be handled as Unsupported Requests, > and all received Completions may optionally be handled as Unexpected Completions. This issue will happen in following logs: Unable to handle kernel paging request at virtual address 00008800e0008010 CPU 0 kworker/0:3(131): Oops 0 pc = [<ffffffff811bea5c>] ra = [<ffffffff81240844>] ps = 0000 Tainted: G W pc is at si_gpu_check_soft_reset+0x3c/0x240 ra is at si_dma_is_lockup+0x34/0xd0 v0 = 0000000000000000 t0 = fff08800e0008010 t1 = 0000000000010000 t2 = 0000000000008010 t3 = fff00007e3c00000 t4
34/0xd0 v0 = 0000000000000000 t0 = fff08800e0008010 t1 = 0000000000010000 t2 = 0000000000008010 t3 = fff00007e3c00000 t4 = fff00007e3c00258 t5 = 000000000000ffff t6 = 0000000000000001 t7 = fff00007ef078000 s0 = fff00007e3c016e8 s1 = fff00007e3c00000 s2 = fff00007e3c00018 s3 = fff00007e3c00000 s4 = fff00007fff59d80 s5 = 0000000000000000 s6 = fff00007ef07bd98 a0 = fff00007e3c00000 a1 = fff00007e3c016e8 a2 = 0000000000000008 a3 = 0000000000000001 a4 = 8f5c28f5c28f5c29 a5 = ffffffff810f4338 t8 = 0000000000000275 t9 = ffffffff809b66f8 t10 = ff6769c5d964b800 t11= 000000000000b886 pv = ffffffff811bea20 at = 0000000000000000 gp = ffffffff81d89690 sp = 00000000aa814126 Disabling lock debugging due to
pv = ffffffff811bea20 at = 0000000000000000 gp = ffffffff81d89690 sp = 00000000aa814126 Disabling lock debugging due to kernel taint Trace: [<ffffffff81240844>] si_dma_is_lockup+0x34/0xd0 [<ffffffff81119610>] radeon_fence_check_lockup+0xd0/0x290 [<ffffffff80977010>] process_one_work+0x280/0x550 [<ffffffff80977350>] worker_thread+0x70/0x7c0 [<ffffffff80977410>] worker_thread+0x130/0x7c0 [<ffffffff80982040>] kthread+0x200/0x210 [<ffffffff809772e0>] worker_thread+0x0/0x7c0 [<ffffffff80981f8c>] kthread+0x14c/0x210 [<ffffffff80911658>] ret_from_kernel_thread+0x18/0x20 [<ffffffff80981e40>] kthread+0x0/0x210 Code: ad3e0008 43f0074a ad7e0018 ad9e0020 8c3001e8 40230101 <88210000> 4821ed21 So force l
f80981e40>] kthread+0x0/0x210 Code: ad3e0008 43f0074a ad7e0018 ad9e0020 8c3001e8 40230101 <88210000> 4821ed21 So force lockup work queue flush to fix this problem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b878da58df2c40b08914d3960e2224040fd1fbfe - https://git.kernel.org/stable/c/4e25e8f27fdbdc6fd55cc572a9939bf24500b9e8 - https://git.kernel.org/stable/c/c0a45f41fde4a0f2c900f719817493ee5c4a5aa3 - https://git.kernel.org/stable/c/c72d97146fc5a4dff381b1737f6167e89860430d - https://git.kernel.org/stable/c/826b46fd5974113515abe9e4fc8178009a8ce18c - https://git.kernel.org/stable/c/5a7a5b2edac4b05abd744eeaebda46d9dacd952
ble/c/826b46fd5974113515abe9e4fc8178009a8ce18c - https://git.kernel.org/stable/c/5a7a5b2edac4b05abd744eeaebda46d9dacd952d - https://git.kernel.org/stable/c/16cb367daa446923d82e332537f446a4cc784b40 - https://git.kernel.org/stable/c/f461950fdc374a3ada5a63c669d997de4600dffe
CVE ID: CVE-2022-48705 State: PUBLISHED Published: 2024-05-03T17:45:54.910Z Last Updated: 2025-05-04T12:43:35.598Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fail in reset, we may need to run mac_reset several times. The sequence would trigger system crash as the log below. Because we do not re-enable/schedule "tx_napi" before disable it again, the process would keep waiting for state change in napi_diable(). To avoid the problem and keep status synchronize for each run, goto final resource handling if drv own failed. [ 5857.353423] mt7921e 0000:3b:00.0: d
status synchronize for each run, goto final resource handling if drv own failed. [ 5857.353423] mt7921e 0000:3b:00.0: driver own failed [ 5858.433427] mt7921e 0000:3b:00.0: Timeout for driver own [ 5859.633430] mt7921e 0000:3b:00.0: driver own failed [ 5859.633444] ------------[ cut here ]------------ [ 5859.633446] WARNING: CPU: 6 at kernel/kthread.c:659 kthread_park+0x11d [ 5859.633717] Workqueue: mt76 mt7921_mac_reset_work [mt7921_common] [ 5859.633728] RIP: 0010:kthread_park+0x11d/0x150 [ 5859.633736] RSP: 0018:ffff8881b676fc68 EFLAGS: 00010202 ...... [ 5859.633766] Call Trace: [ 5859.633768] <TASK> [ 5859.633771] mt7921e_mac_reset+0x176/0x6f0 [mt7921e] [ 5859.633778] mt7921_mac_reset_w
ll Trace: [ 5859.633768] <TASK> [ 5859.633771] mt7921e_mac_reset+0x176/0x6f0 [mt7921e] [ 5859.633778] mt7921_mac_reset_work+0x184/0x3a0 [mt7921_common] [ 5859.633785] ? mt7921_mac_set_timing+0x520/0x520 [mt7921_common] [ 5859.633794] ? __kasan_check_read+0x11/0x20 [ 5859.633802] process_one_work+0x7ee/0x1320 [ 5859.633810] worker_thread+0x53c/0x1240 [ 5859.633818] kthread+0x2b8/0x370 [ 5859.633824] ? process_one_work+0x1320/0x1320 [ 5859.633828] ? kthread_complete_and_exit+0x30/0x30 [ 5859.633834] ret_from_fork+0x1f/0x30 [ 5859.633842] </TASK> Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f7f3001723e337568017e8617974
SA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f7f3001723e337568017e8617974f29bc8b2f595 - https://git.kernel.org/stable/c/fa3fbe64037839f448dc569212bafc5a495d8219
CVE ID: CVE-2022-48706 State: PUBLISHED Published: 2024-05-21T15:22:48.087Z Last Updated: 2025-05-04T08:21:26.423Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leaks memory if it is not freed before returning. Call is made to correct return statement so memory does not leak. ifcvf_init_hw does not take care of this so it is needed to do it here. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/5d2cc32c1c10bd889125d2adc16a6bc3338dcd3e - https://git.kernel.org/stable/c/6b04456e248761cf68f562
it.kernel.org/stable/c/5d2cc32c1c10bd889125d2adc16a6bc3338dcd3e - https://git.kernel.org/stable/c/6b04456e248761cf68f562f2fd7c04e591fcac94
CVE ID: CVE-2022-48707 State: PUBLISHED Published: 2024-05-21T15:22:48.735Z Last Updated: 2025-05-04T08:21:27.565Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix null pointer dereference for resetting decoder Not all decoders have a reset callback. The CXL specification allows a host bridge with a single root port to have no explicit HDM decoders. Currently the region driver assumes there are none. As such the CXL core creates a special pass through decoder instance without a commit/reset callback. Prior to this patch, the ->reset() callback was called unconditionally when calling cxl_region_decode_reset. Thus a
ack. Prior to this patch, the ->reset() callback was called unconditionally when calling cxl_region_decode_reset. Thus a configuration with 1 Host Bridge, 1 Root Port, and one directly attached CXL type 3 device or multiple CXL type 3 devices attached to downstream ports of a switch can cause a null pointer dereference. Before the fix, a kernel crash was observed when we destroy the region, and a pass through decoder is reset. The issue can be reproduced as below, 1) create a region with a CXL setup which includes a HB with a single root port under which a memdev is attached directly. 2) destroy the region with cxl destroy-region regionX -f. Additional Analyst Notes: - CISA ADP Vulnrichment:
d directly. 2) destroy the region with cxl destroy-region regionX -f. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a04c7d062b537ff787d00da95bdfe343260d4beb - https://git.kernel.org/stable/c/4fa4302d6dc7de7e8e74dc7405611a2efb4bf54b
CVE ID: CVE-2022-48708 State: PUBLISHED Published: 2024-05-21T15:22:49.381Z Last Updated: 2025-05-04T08:21:29.180Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference Added checking of pointer "function" in pcs_set_mux(). pinmux_generic_get_function() can return NULL and the pointer "function" was dereferenced without checking against NULL. Found by Linux Verification Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1177bdafe87cbe543a2dc48a9bbac265aa5864db - https://git.kernel
m Container: References: - https://git.kernel.org/stable/c/1177bdafe87cbe543a2dc48a9bbac265aa5864db - https://git.kernel.org/stable/c/e671e63587c92b3fd767cf82e73129f6d5feeb33 - https://git.kernel.org/stable/c/2b763f7de108cb1a5ad5ed08e617d677341947cb - https://git.kernel.org/stable/c/6e2a0521e4e84a2698f2da3950fb5c5496a4d208 - https://git.kernel.org/stable/c/71668706fbe7d20e6f172fa3287fa8aac1b56c26 - https://git.kernel.org/stable/c/bcc487001a15f71f103d102cba4ac8145d7a68f2 - https://git.kernel.org/stable/c/d2d73e6d4822140445ad4a7b1c6091e0f5fe703b
CVE ID: CVE-2022-48709 State: PUBLISHED Published: 2024-05-21T15:22:50.054Z Last Updated: 2025-05-04T08:21:30.239Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ice: switch: fix potential memleak in ice_add_adv_recipe() When ice_add_special_words() fails, the 'rm' is not released, which will lead to a memory leak. Fix this up by going to 'err_unroll' label. Compile tested only. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/47f4ff6f23f00f5501ff2d7054c1a37c170a7aa0 - https://git.kernel.org/stable/c/4a606ce68426c88ff2563382b33cc34f3485fe57
CVE ID: CVE-2022-48710 State: PUBLISHED Published: 2024-05-21T15:30:37.579Z Last Updated: 2025-05-04T08:21:31.338Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix a possible null pointer dereference In radeon_fp_native_mode(), the return value of drm_mode_duplicate() is assigned to mode, which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Add a check to avoid npd. The failure status of drm_cvt_mode() on the other path is checked too. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b33f7d99c9226892c7794dc2500fae
ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b33f7d99c9226892c7794dc2500fae35966020c9 - https://git.kernel.org/stable/c/16a0f0b63c4c7eb46fc4c3f00bf2836e6ee46a9f - https://git.kernel.org/stable/c/8a89bfeef9abe93371e3ea8796377f2d132eee29 - https://git.kernel.org/stable/c/28fd384c78d7d8ed8af0d086d778c3e438ba7f60 - https://git.kernel.org/stable/c/fee8ae0a0bb66eb7730c22f44fbd7203f63c2eab - https://git.kernel.org/stable/c/7b7fba107b2c4ec7673d0f45bdbb9d1af697d9b9 - https://git.kernel.org/stable/c/e938d24f0b7392e142b8aa434f18590d99dbe479 - https://git.kernel.org/stable/c/140d9807b96e1303f6f2675a7ae8710a2094bd17 - https://git.kernel.org/stable/c/a2b28708b6
- https://git.kernel.org/stable/c/140d9807b96e1303f6f2675a7ae8710a2094bd17 - https://git.kernel.org/stable/c/a2b28708b645c5632dc93669ab06e97874c8244f
CVE ID: CVE-2022-48711 State: PUBLISHED Published: 2024-06-20T11:13:06.050Z Last Updated: 2025-05-04T08:21:32.509Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipc_mon_rcv() allows a node to receive and process domain_record structs from peer nodes to track their views of the network topology. This patch verifies that the number of members in a received domain record does not exceed the limit defined by MAX_MON_DOMAIN, something that may otherwise lead to a stack overflow. tipc_mon_rcv() is called from the function tipc_link_proto_rcv(), where we are rea
y otherwise lead to a stack overflow. tipc_mon_rcv() is called from the function tipc_link_proto_rcv(), where we are reading a 32 bit message data length field into a uint16. To avert any risk of bit overflow, we add an extra sanity check for this in that function. We cannot see that happen with the current code, but future designers being unaware of this risk, may introduce it by allowing delivery of very large (> 64k) sk buffers from the bearer layer. This potential problem was identified by Eric Dumazet. This fixes CVE-2022-0435 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/175db196e45d6f0e6047eccd09c8ba55465eb131
ichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/175db196e45d6f0e6047eccd09c8ba55465eb131 - https://git.kernel.org/stable/c/fde4ddeadd099bf9fbb9ccbee8e1b5c20d530a2d - https://git.kernel.org/stable/c/f1af11edd08dd8376f7a84487cbb0ea8203e3a1d - https://git.kernel.org/stable/c/d692e3406e052dbf9f6d9da0cba36cb763272529 - https://git.kernel.org/stable/c/3c7e5943553594f68bbc070683db6bb6f6e9e78e - https://git.kernel.org/stable/c/1f1788616157b0222b0c2153828b475d95e374a7 - https://git.kernel.org/stable/c/59ff7514f8c56f166aadca49bcecfa028e0ad50f - https://git.kernel.org/stable/c/9aa422ad326634b76309e8ff342c246800621216
CVE ID: CVE-2022-48712 State: PUBLISHED Published: 2024-06-20T11:13:06.701Z Last Updated: 2025-05-04T08:21:33.563Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that. Also it cleans up some duplicated error handling logic from various functions in fast_commit.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/62e46e0ffc02daa8fcfc02f7a932cc8a19601b19
ntainer: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/62e46e0ffc02daa8fcfc02f7a932cc8a19601b19 - https://git.kernel.org/stable/c/1b6762ecdf3cf12113772427c904aa3c420a1802 - https://git.kernel.org/stable/c/14aa3f49c7fc6424763f4323bfbc3a807b0727dc - https://git.kernel.org/stable/c/cdce59a1549190b66f8e3fe465c2b2f714b98a94
CVE ID: CVE-2022-48713 State: PUBLISHED Published: 2024-06-20T11:13:07.350Z Last Updated: 2025-05-04T08:21:34.580Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf->single before calling pt_buffer_region_size in a place where a missing check can cause a kernel crash. Fixes a bug introduced by commit 670638477aed ("perf/x86/intel/pt: Opportunistically use single range output mode"), which added a support for PT single-range output mode. Since that commit if a PT stop filter range is hit while tracing, the kernel will crash because of a null po
utput mode. Since that commit if a PT stop filter range is hit while tracing, the kernel will crash because of a null pointer dereference in pt_handle_status due to calling pt_buffer_region_size without a ToPA configured. The commit which introduced single-range mode guarded almost all uses of the ToPA buffer variables with checks of the buf->single variable, but missed the case where tracing was stopped by the PT hardware, which happens when execution hits a configured stop filter. Tested that hitting a stop filter while PT recording successfully records a trace with this patch but crashes without this patch. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refere
patch but crashes without this patch. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/456f041e035913fcedb275aff6f8a71dfebcd394 - https://git.kernel.org/stable/c/e83d941fd3445f660d2f43647c580a320cc384f6 - https://git.kernel.org/stable/c/feffb6ae2c80b9a8206450cdef90f5943baced99 - https://git.kernel.org/stable/c/1d9093457b243061a9bba23543c38726e864a643
CVE ID: CVE-2022-48714 State: PUBLISHED Published: 2024-06-20T11:13:08.007Z Last Updated: 2025-05-04T08:21:35.616Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmalloc: unpoison VM_ALLOC pages after mapping"), non-VM_ALLOC mappings will be marked as accessible in __get_vm_area_node() when KASAN is enabled. But now the flag for ringbuf area is VM_ALLOC, so KASAN will complain out-of-bound access after vmap() returns. Because the ringbuf area is created by mapping allocated pages, so use VM_MAP instead. After the change, info in /proc/vmallocinfo
e ringbuf area is created by mapping allocated pages, so use VM_MAP instead. After the change, info in /proc/vmallocinfo also changes from [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmalloc user to [start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmap user Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6304a613a97d6dcd49b93fbad31e9f39d1e138d6 - https://git.kernel.org/stable/c/5e457aeab52a5947619e1f18047f4d2f3212b3eb - https://git.kernel.org/stable/c/d578933f6226d5419af9306746efa1c693cbaf9c - https://git.kernel.org/stable/c/b293dcc473d22a62dc6d78de2b15e4f49515db56
CVE ID: CVE-2022-48715 State: PUBLISHED Published: 2024-06-20T11:13:08.654Z Last Updated: 2025-05-04T08:21:36.790Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe Running tests with a debug kernel shows that bnx2fc_recv_frame() is modifying the per_cpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and run the bnx2fc driver with the hardware enabled. [ 1391.699147] BUG: using smp_processor_id() in preemptible [00000000] code: bnx2fc_ [ 1391.699160] caller is bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc] [ 1391.699174] CPU: 2 PID: 4355 Comm: bnx2fc_l2_threa Kdump: loade
60] caller is bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc] [ 1391.699174] CPU: 2 PID: 4355 Comm: bnx2fc_l2_threa Kdump: loaded Tainted: G B [ 1391.699180] Hardware name: HP ProLiant DL120 G7, BIOS J01 07/01/2013 [ 1391.699183] Call Trace: [ 1391.699188] dump_stack_lvl+0x57/0x7d [ 1391.699198] check_preemption_disabled+0xc8/0xd0 [ 1391.699205] bnx2fc_recv_frame+0xbf9/0x1760 [bnx2fc] [ 1391.699215] ? do_raw_spin_trylock+0xb5/0x180 [ 1391.699221] ? bnx2fc_npiv_create_vports.isra.0+0x4e0/0x4e0 [bnx2fc] [ 1391.699229] ? bnx2fc_l2_rcv_thread+0xb7/0x3a0 [bnx2fc] [ 1391.699240] bnx2fc_l2_rcv_thread+0x1af/0x3a0 [bnx2fc] [ 1391.699250] ? bnx2fc_ulp_init+0xc0/0xc0 [bnx2fc] [ 1391.699258] kthread+0x364/0x420
2_rcv_thread+0x1af/0x3a0 [bnx2fc] [ 1391.699250] ? bnx2fc_ulp_init+0xc0/0xc0 [bnx2fc] [ 1391.699258] kthread+0x364/0x420 [ 1391.699263] ? _raw_spin_unlock_irq+0x24/0x50 [ 1391.699268] ? set_kthread_struct+0x100/0x100 [ 1391.699273] ret_from_fork+0x22/0x30 Restore the old get_cpu/put_cpu code with some modifications to reduce the size of the critical section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3a345198a7c2d1db2526dc60b77052f75de019d3 - https://git.kernel.org/stable/c/471085571f926a1fe6b1bed095638994dbf23990 - https://git.kernel.org/stable/c/003bcee66a8f0e76157eb3af369c173151901d97 - https://git.kernel.org/s
d095638994dbf23990 - https://git.kernel.org/stable/c/003bcee66a8f0e76157eb3af369c173151901d97 - https://git.kernel.org/stable/c/53e4f71763c61a557283eb43301efd671922d1e8 - https://git.kernel.org/stable/c/ec4334152dae175dbd8fd5bde1d2139bbe7b42d0 - https://git.kernel.org/stable/c/2f5a1ac68bdf2899ce822ab845081922ea8c588e - https://git.kernel.org/stable/c/2d24336c7214b281b51860e54783dfc65f1248df - https://git.kernel.org/stable/c/936bd03405fc83ba039d42bc93ffd4b88418f1d3
CVE ID: CVE-2022-48716 State: PUBLISHED Published: 2024-06-20T11:13:09.315Z Last Updated: 2025-05-04T08:21:37.799Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in mixer->reg, which is not same as port id. port id should be derived from chan_info array. So fix this. Without this, its possible that we could corrupt struct wcd938x_sdw_priv by accessing port_map array out of range with channel id instead of port id. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/aa7152f9
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/aa7152f9f117b3e66b3c0d4158ca4c6d46ab229f - https://git.kernel.org/stable/c/9167f2712dc8c24964840a4d1e2ebf130e846b95 - https://git.kernel.org/stable/c/c5c1546a654f613e291a7c5d6f3660fc1eb6d0c7
CVE ID: CVE-2022-48717 State: PUBLISHED Published: 2024-06-20T11:13:09.959Z Last Updated: 2025-05-04T08:21:38.862Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "priv->gain" to prevent an out of bounds access. The concern is that these might come from the user via: -> snd_ctl_elem_write_user() -> snd_ctl_elem_write() -> kctl->put() Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e - https://git.kernel.org/stable/c/71e60c170105d15
tps://git.kernel.org/stable/c/a0f49d12547d45ea8b0f356a96632dd503941c1e - https://git.kernel.org/stable/c/71e60c170105d153e34d01766c1e4db26a4b24cc - https://git.kernel.org/stable/c/5a45448ac95b715173edb1cd090ff24b6586d921 - https://git.kernel.org/stable/c/baead410e5db49e962a67fffc17ac30e44b50b7c - https://git.kernel.org/stable/c/f114fd6165dfb52520755cc4d1c1dfbd447b88b6 - https://git.kernel.org/stable/c/4c907bcd9dcd233da6707059d777ab389dcbd964
CVE ID: CVE-2022-48718 State: PUBLISHED Published: 2024-06-20T11:13:10.608Z Last Updated: 2025-05-04T08:21:40.118Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL pointer which drm_atomic_get_new_bridge_state is allowed to return. Assume a fixed format instead. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/86a337bb803040e4401b87c974a7fb92efe3d0e1 - https://git.kernel.org/stable/c/6f9267e01cca749137349d8ffb0d0ebbadf567f4 - https://git.kernel.org/stable/c/622c9a3a7868e1eeca
://git.kernel.org/stable/c/6f9267e01cca749137349d8ffb0d0ebbadf567f4 - https://git.kernel.org/stable/c/622c9a3a7868e1eeca39c55305ca3ebec4742b64
CVE ID: CVE-2022-48719 State: PUBLISHED Published: 2024-06-20T11:13:11.362Z Last Updated: 2025-05-04T08:21:41.202Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work syzkaller was able to trigger a deadlock for NTF_MANAGED entries [0]: kworker/0:16/14617 is trying to acquire lock: ffffffff8d4dd370 (&tbl->lock){++-.}-{2:2}, at: ___neigh_create+0x9e1/0x2990 net/core/neighbour.c:652 [...] but task is already holding lock: ffffffff8d4dd370 (&tbl->lock){++-.}-{2:2}, at: neigh_managed_work+0x35/0x250 net/core/neighbour.c:1572 The neighbor entry turned to NU