Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-41013 State: PUBLISHED Published: 2024-07-29T06:36:59.930Z Last Updated: 2025-11-03T17:31:18.914Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfs_dir2_data_unused and xfs_dir2_data_entry to make sure don't stray beyond valid memory region. Before patching, the loop simply checks that the start offset of the dup and dep is within the range. So in a crafted image, if last entry is xfs_dir2_data_unused, we can change dup->length to dup->length-1 and leave 1 byte of space. In the next traversal, this space will be considered as dup
ange dup->length to dup->length-1 and leave 1 byte of space. In the next traversal, this space will be considered as dup or dep. We may encounter an out of bound read when accessing the fixed members. In the patch, we make sure that the remaining bytes large enough to hold an unused entry before accessing xfs_dir2_data_unused and xfs_dir2_data_unused is XFS_DIR2_DATA_ALIGN byte aligned. We also make sure that the remaining bytes large enough to hold a dirent with a single-byte name before accessing xfs_dir2_data_entry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b0932e4f9da85349d1c8f2a77d2a7a7163b8511d - https://gi
SA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b0932e4f9da85349d1c8f2a77d2a7a7163b8511d - https://git.kernel.org/stable/c/ca96d83c93071f95cf962ce92406621a472df31b - https://git.kernel.org/stable/c/0c7fcdb6d06cdf8b19b57c17605215b06afa864a
CVE ID: CVE-2024-41014 State: PUBLISHED Published: 2024-07-29T06:37:00.826Z Last Updated: 2025-11-03T20:38:27.100Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of the space occupied by fixed members of xlog_op_header in the xlog_recover_process_data. We can create a crafted image to trigger an out of bounds read by following these steps: 1) Mount an image of xfs, and do some file operations to leave records 2) Before umounting, copy the image for subsequent steps to simulate abnormal exit. Because umount will ensure that tail_blk and head_bl
ing, copy the image for subsequent steps to simulate abnormal exit. Because umount will ensure that tail_blk and head_blk are the same, which will result in the inability to enter xlog_recover_process_data 3) Write a tool to parse and modify the copied image in step 2 4) Make the end of the xlog_op_header entries only 1 byte away from xlog_rec_header->h_size 5) xlog_rec_header->h_num_logops++ 6) Modify xlog_rec_header->h_crc Fix: Add a check to make sure there is sufficient space to access fixed members of xlog_op_header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d1e3efe783365db59da88f08a2e0bfe1cc95b143 - https:/
CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d1e3efe783365db59da88f08a2e0bfe1cc95b143 - https://git.kernel.org/stable/c/7cd9f0a33e738cd58876f1bc8d6c1aa5bc4fc8c1 - https://git.kernel.org/stable/c/fb63435b7c7dc112b1ae1baea5486e0a6e27b196
CVE ID: CVE-2024-41015 State: PUBLISHED Published: 2024-07-29T06:37:01.651Z Last Updated: 2025-11-03T21:59:17.542Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_check_dir_entry() This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2 - https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0 - https://git.kernel.org/stable/c/77495e5da5cb110a8fe
//git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0 - https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176 - https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7 - https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114 - https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd - https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c - https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59 - https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb
CVE ID: CVE-2024-41016 State: PUBLISHED Published: 2024-07-29T06:37:02.530Z Last Updated: 2025-11-03T21:59:18.988Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090 - https://git.kernel.org/
chment: References: - https://git.kernel.org/stable/c/e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090 - https://git.kernel.org/stable/c/e8f9c4af7af7e9e4cd09c0251c7936593147419f - https://git.kernel.org/stable/c/57a3d89831fcaa2cdbe024b47c7c36d5a56c3637 - https://git.kernel.org/stable/c/c031d286eceb82f72f8623b7f4abd2aa491bfb5e - https://git.kernel.org/stable/c/cfb926051fab19b10d1e65976211f364aa820180 - https://git.kernel.org/stable/c/c726dea9d0c806d64c26fcef483b1fb9474d8c5e - https://git.kernel.org/stable/c/e4ffea01adf3323c821b6f37e9577d2d400adbaa - https://git.kernel.org/stable/c/af77c4fc1871847b528d58b7fdafb4aa1f6a9262
CVE ID: CVE-2024-41017 State: PUBLISHED Published: 2024-07-29T06:37:03.390Z Last Updated: 2025-11-03T21:59:20.503Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7f91bd0f2941fa36449ce1a15faaa64f840d9746 - https://git.kernel.org/stable/c/fc16776a82e8df97b6c4f9a10ba95aa44cef7ba5 - https://git.kernel.org/stable/c/6386f1b6a10e5d1ddd03db4ff6dfc55d488852ce - https://git.kernel.org/stabl
a95aa44cef7ba5 - https://git.kernel.org/stable/c/6386f1b6a10e5d1ddd03db4ff6dfc55d488852ce - https://git.kernel.org/stable/c/7e21574195a45fc193555fa40e99fed16565ff7e - https://git.kernel.org/stable/c/4e034f7e563ab723b93a59980e4a1bb33198ece8 - https://git.kernel.org/stable/c/17440dbc66ab98b410514b04987f61deedb86751 - https://git.kernel.org/stable/c/f4435f476b9bf059cd9e26a69f5b29c768d00375 - https://git.kernel.org/stable/c/dbde7bc91093fa9c2410e418b236b70fde044b73 - https://git.kernel.org/stable/c/d0fa70aca54c8643248e89061da23752506ec0d4
CVE ID: CVE-2024-41018 State: PUBLISHED Published: 2024-07-29T06:37:04.372Z Last Updated: 2025-05-04T12:57:25.164Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attr_names and oatbl Added out-of-bound checking for *ane (ATTR_NAME_ENTRY). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f3124d51e4e7b56a732419d8dc270e807252334f - https://git.kernel.org/stable/c/c114d2b88f8b226d4b2acf5a1ba0412cde6c31dd - https://git.kernel.org/stable/c/9b71f820f7168f1eab8378c80c7ea8a022a475bc - https://git.kernel.org/stable/c/702d4930eb06dcfda85a2fa
t.kernel.org/stable/c/9b71f820f7168f1eab8378c80c7ea8a022a475bc - https://git.kernel.org/stable/c/702d4930eb06dcfda85a2fa67e8a1a27bfa2a845
CVE ID: CVE-2024-41019 State: PUBLISHED Published: 2024-07-29T06:37:05.300Z Last Updated: 2025-11-03T21:59:21.968Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. There is a check on rt->first_free at first, but walking through by ff without any check. If the second ff is a large offset. We may encounter an out-of-bound read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/35652dfa8cc9a8a900ec0f1e0395781f94ffc5f0 - https://git.kernel.org/stable/c/818a257428644b8873e79c44404d8fb6598d4440 -
c/35652dfa8cc9a8a900ec0f1e0395781f94ffc5f0 - https://git.kernel.org/stable/c/818a257428644b8873e79c44404d8fb6598d4440 - https://git.kernel.org/stable/c/6ae7265a7b816879fd0203e83b5030d3720bbb7a - https://git.kernel.org/stable/c/82c94e6a7bd116724738aa67eba6f5fedf3a3319 - https://git.kernel.org/stable/c/617cf144c206f98978ec730b17159344fd147cb4 - https://git.kernel.org/stable/c/50c47879650b4c97836a0086632b3a2e300b0f06
CVE ID: CVE-2024-41020 State: PUBLISHED Published: 2024-07-29T13:34:21.617Z Last Updated: 2025-11-03T21:59:23.424Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when fcntl/close race is detected"), I missed that there are two copies of the code I was patching: The normal version, and the version for 64-bit offsets on 32-bit kernels. Thanks to Greg KH for stumbling over this while doing the stable backport... Apply exactly the same fix to the compat path for 32-bit kernels. Additional Analyst Notes: - CVE Progr
able backport... Apply exactly the same fix to the compat path for 32-bit kernels. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a561145f3ae973ebf3e0aee41624e92a6c5cb38d - https://git.kernel.org/stable/c/4c43ad4ab41602201d34c66ac62130fe339d686f - https://git.kernel.org/stable/c/911cc83e56a2de5a40758766c6a70d6998248860 - https://git.kernel.org/stable/c/53e21cfa68a7d12de378b7116c75571f73e0dfa2 - https://git.kernel.org/stable/c/f4d0775c6e2f1340ca0725f0337de149aaa989ca - https://git.kernel.org/stable/c/73ae349534ebc377328e7d21891e589626c6e82c - https://git.kernel.org/stable/c/5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02 - ht
73ae349534ebc377328e7d21891e589626c6e82c - https://git.kernel.org/stable/c/5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02 - https://git.kernel.org/stable/c/ed898f9ca3fa32c56c858b463ceb9d9936cc69c4 - https://git.kernel.org/stable/c/f8138f2ad2f745b9a1c696a05b749eabe44337ea
CVE ID: CVE-2024-41021 State: PUBLISHED Published: 2024-07-29T13:34:22.636Z Last Updated: 2025-05-04T09:20:16.757Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on s390. Therefore we do not expect to see VM_FAULT_HWPOISON in do_exception(). However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more general"), it is possible to see VM_FAULT_HWPOISON in combination with PTE_MARKER_POISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the
PTE_MARKER_POISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the BUG() in do_exception(). Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault flags, for easier debugging. Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot support swap entries on other levels than PTE level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 - https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff - https://git.
66d2906ec011e100319359fe2277d0 - https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff - https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b - https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a
CVE ID: CVE-2024-41022 State: PUBLISHED Published: 2024-07-29T13:34:23.507Z Last Updated: 2025-11-03T21:59:24.891Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() The "instance" variable needs to be signed for the error handling to work. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3dd9734878a9042f0358301d19a2b006a0fc4d06 - https://git.kernel.org/stable/c/a5224e2123ce21102f346f518db80f004d5053a7 - https://git.kernel.org/stable/c/544fa213f15d27f0370795845d55eeb3e00080d2 - https://git.kernel.o
346f518db80f004d5053a7 - https://git.kernel.org/stable/c/544fa213f15d27f0370795845d55eeb3e00080d2 - https://git.kernel.org/stable/c/e8dfbf83a82bbfb9680921719fbe65e535af59ea - https://git.kernel.org/stable/c/4edb0a84e6b32e75dc9bd6dd085b2c2ff19ec287 - https://git.kernel.org/stable/c/d347c9a398bf7eab9408d207c0a50fb720f9de7d - https://git.kernel.org/stable/c/298e2ce222e712ffafa47288c5b2fcf33d72fda3 - https://git.kernel.org/stable/c/6769a23697f17f9bf9365ca8ed62fe37e361a05a
CVE ID: CVE-2024-41023 State: PUBLISHED Published: 2024-07-29T14:31:40.439Z Last Updated: 2025-05-04T12:57:26.289Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution of the following stress test with linux-rt: stress-ng --cyclic 30 --timeout 30 --minimize --quiet kmemleak frequently reported a memory leak concerning the task_struct: unreferenced object 0xffff8881305b8000 (size 16136): comm "stress-ng", pid 614, jiffies 4294883961 (age 286.412s) object hex dump (first 32 bytes): 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .@.............. 00 00 00 00 00 00 00 00
ject hex dump (first 32 bytes): 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .@.............. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ debug hex dump (first 16 bytes): 53 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 S............... backtrace: [<00000000046b6790>] dup_task_struct+0x30/0x540 [<00000000c5ca0f0b>] copy_process+0x3d9/0x50e0 [<00000000ced59777>] kernel_clone+0xb0/0x770 [<00000000a50befdc>] __do_sys_clone+0xb6/0xf0 [<000000001dbf2008>] do_syscall_64+0x5d/0xf0 [<00000000552900ff>] entry_SYSCALL_64_after_hwframe+0x6e/0x76 The issue occurs in start_dl_timer(), which increments the task_struct reference count and sets a timer. The timer callback, dl_task_tim
in start_dl_timer(), which increments the task_struct reference count and sets a timer. The timer callback, dl_task_timer, is supposed to decrement the reference count upon expiration. However, if enqueue_task_dl() is called before the timer expires and cancels it, the reference count is not decremented, leading to the leak. This patch fixes the reference leak by ensuring the task_struct reference count is properly decremented when the timer is canceled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7a54d31face626f62de415ebe77b43f76c3ffaf4 - https://git.kernel.org/stable/c/b58652db66c910c2245f5bee7deca41c12d707b9
CVE ID: CVE-2024-41024 State: REJECTED Published: 2024-07-29T14:31:41.257Z Last Updated: 2024-12-19T11:28:19.646Z Description: No description available.
CVE ID: CVE-2024-41025 State: PUBLISHED Published: 2024-07-29T14:31:42.275Z Last Updated: 2025-05-04T09:20:21.224Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio PD daemon send the name as part of the init IOCTL call. This name needs to be copied to kernel for which memory is allocated. This memory is never freed which might result in memory leak. Free the memory when it is not needed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2 - https://git
A ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8b8b82dcf393ceaca8c88939338fd4c30b5b11b2 - https://git.kernel.org/stable/c/dbf4c31c9b039fd9734da156036492a2a7f78f64 - https://git.kernel.org/stable/c/ad0bd973a033003ca578c42a760d1dc77aeea15e
CVE ID: CVE-2024-41026 State: PUBLISHED Published: 2024-07-29T14:31:43.056Z Last Updated: 2025-05-04T09:20:22.742Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length No check is done on the size of the data to be transmiited. This causes a kernel panic when this size exceeds the sg_miter's length. Limit the number of transmitted bytes to sgm->length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c561c4ecce712f94b442db5960e281f13b28df2e - https://git.kernel.org/stable/c/16198eef11c19
https://git.kernel.org/stable/c/c561c4ecce712f94b442db5960e281f13b28df2e - https://git.kernel.org/stable/c/16198eef11c1929374381d7f6271b4bf6aa44615
CVE ID: CVE-2024-41027 State: PUBLISHED Published: 2024-07-29T14:31:43.859Z Last Updated: 2025-11-03T21:59:26.365Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: Fix userfaultfd_api to return EINVAL as expected Currently if we request a feature that is not set in the Kernel config we fail silently and return all the available features. However, the man page indicates we should return an EINVAL. We need to fix this issue since we can end up with a Kernel warning should a program request the feature UFFD_FEATURE_WP_UNPOPULATED on a kernel with the config not set with this feature. [ 200.812896] WARNING: CPU: 91 PID: 13634 at mm/m
_WP_UNPOPULATED on a kernel with the config not set with this feature. [ 200.812896] WARNING: CPU: 91 PID: 13634 at mm/memory.c:1660 zap_pte_range+0x43d/0x660 [ 200.820738] Modules linked in: [ 200.869387] CPU: 91 PID: 13634 Comm: userfaultfd Kdump: loaded Not tainted 6.9.0-rc5+ #8 [ 200.877477] Hardware name: Dell Inc. PowerEdge R6525/0N7YGH, BIOS 2.7.3 03/30/2022 [ 200.885052] RIP: 0010:zap_pte_range+0x43d/0x660 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/519547760f16eae7803d2658d9524bc5ba7a20a7 - https://git.kernel.org/stable/c/14875fd5f9bcf60ac5518c63bfb676ade44aa7c6 - https://git.kernel.org/stable/c/cd94cac406
- https://git.kernel.org/stable/c/14875fd5f9bcf60ac5518c63bfb676ade44aa7c6 - https://git.kernel.org/stable/c/cd94cac4069a763ab5206be2c64c9a8beae590ba - https://git.kernel.org/stable/c/8111f902b7c95d75fc80c7e577f5045886c6b384 - https://git.kernel.org/stable/c/1723f04caacb32cadc4e063725d836a0c4450694
CVE ID: CVE-2024-41028 State: PUBLISHED Published: 2024-07-29T14:31:44.704Z Last Updated: 2025-11-03T21:59:27.844Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to use toshiba_dmi_quirks[] together with the standard DMI matching functions, it must be terminated by a empty entry. Since this entry is missing, an array out-of-bounds access occurs every time the quirk list is processed. Fix this by adding the terminating empty entry. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e030aa6c97
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e030aa6c972641cb069086a8c7a0f747653e472a - https://git.kernel.org/stable/c/639868f1cb87b683cf830353bbee0c4078202313 - https://git.kernel.org/stable/c/0d71da43d6b7916d36cf1953d793da80433c50bf - https://git.kernel.org/stable/c/b6e02c6b0377d4339986e07aeb696c632cd392aa
CVE ID: CVE-2024-41029 State: PUBLISHED Published: 2024-07-29T14:31:45.465Z Last Updated: 2025-05-04T09:20:27.143Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nvmem: core: limit cell sysfs permissions to main attribute ones The cell sysfs attribute should not provide more access to the nvmem data than the main attribute itself. For example if nvme_config::root_only was set, the cell attribute would still provide read access to everybody. Mask out permissions not available on the main attribute. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/aa066afaaa
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/aa066afaaac32caf2160d58d4e3010ee04421c62 - https://git.kernel.org/stable/c/6bef98bafd82903a8d461463f9594f19f1fd6a85
CVE ID: CVE-2024-41030 State: PUBLISHED Published: 2024-07-29T14:31:46.144Z Last Updated: 2025-11-03T21:59:29.284Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ksmbd: discard write access to the directory open may_open() does not allow a directory to be opened with the write access. However, some writing flags set by client result in adding write access on server, making ksmbd incompatible with FUSE file system. Simply, let's discard the write access when opening a directory. list_add corruption. next is NULL. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:26! pc : __list_add_valid+0x88/0xbc lr : __list_a
L. ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:26! pc : __list_add_valid+0x88/0xbc lr : __list_add_valid+0x88/0xbc Call trace: __list_add_valid+0x88/0xbc fuse_finish_open+0x11c/0x170 fuse_open_common+0x284/0x5e8 fuse_dir_open+0x14/0x24 do_dentry_open+0x2a4/0x4e0 dentry_open+0x50/0x80 smb2_open+0xbe4/0x15a4 handle_ksmbd_work+0x478/0x5ec process_one_work+0x1b4/0x448 worker_thread+0x25c/0x430 kthread+0x104/0x1d4 ret_from_fork+0x10/0x20 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/66cf853e1c7a2407f15d9f7aaa3e47d61745e361 - https://git.kernel.org/stable/c/9e84b1ba5c98fb5c9f869c85db1d870354613baa -
/c/66cf853e1c7a2407f15d9f7aaa3e47d61745e361 - https://git.kernel.org/stable/c/9e84b1ba5c98fb5c9f869c85db1d870354613baa - https://git.kernel.org/stable/c/198498b2049c0f11f7670be6974570e02b0cc035 - https://git.kernel.org/stable/c/e2e33caa5dc2eae7bddf88b22ce11ec3d760e5cd
CVE ID: CVE-2024-41031 State: PUBLISHED Published: 2024-07-29T14:31:46.943Z Last Updated: 2025-05-04T09:20:30.328Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mm/filemap: skip to create PMD-sized page cache if needed On ARM64, HPAGE_PMD_ORDER is 13 when the base page size is 64KB. The PMD-sized page cache can't be supported by xarray as the following error messages indicate. ------------[ cut here ]------------ WARNING: CPU: 35 PID: 7484 at lib/xarray.c:1025 xas_split_alloc+0xf8/0x128 Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib \ nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct \ nft_chai