Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
iner: References: - https://git.kernel.org/stable/c/7d870088db4863c514a7f8751cd593751983029a - https://git.kernel.org/stable/c/b3e7eb23a6e97642ff3190431c06475d9ca1e062 - https://git.kernel.org/stable/c/33de53a2706066d526173dc743faf43d92c62105 - https://git.kernel.org/stable/c/f62b8969847850ba7596cb145cc47c65ea57dae0 - https://git.kernel.org/stable/c/c49f14cc1bb12c625a1c572e8a95b6adefd4d8eb - https://git.kernel.org/stable/c/2a5b3370a1d9750eca325292e291c8c7cb8cf2e0
CVE ID: CVE-2023-52864 State: PUBLISHED Published: 2024-05-21T15:31:55.875Z Last Updated: 2025-05-04T07:44:33.981Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: platform/x86: wmi: Fix opening of char device Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the
to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices(). Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cf098e937dd125c0317a0d6f261ac2a950a233d6 - https://git.kernel.org/stable/c/9fb0eed09e1470cd4021ff52b2b9dfcbcee4c203 - https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453 - https://git.kernel.
021ff52b2b9dfcbcee4c203 - https://git.kernel.org/stable/c/d426a2955e45a95b2282764105fcfb110a540453 - https://git.kernel.org/stable/c/e0bf076b734a2fab92d8fddc2b8b03462eee7097 - https://git.kernel.org/stable/c/44a96796d25809502c75771d40ee693c2e44724e - https://git.kernel.org/stable/c/36d85fa7ae0d6be651c1a745191fa7ef055db43e - https://git.kernel.org/stable/c/fb7b06b59c6887659c6ed0ecd3110835eecbb6a3 - https://git.kernel.org/stable/c/eba9ac7abab91c8f6d351460239108bef5e7a0b6
CVE ID: CVE-2023-52865 State: PUBLISHED Published: 2024-05-21T15:31:56.527Z Last Updated: 2025-05-04T07:44:35.104Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c26feedbc561f2a3cee1a4f717e61bdbdfb4fa92 - https://git.kernel.org/stable/c/4c79cbfb8e9e2311be77182893fda5ea4068c836 - https://git.kernel.org/stable/c/2705c5b97f504e831ae1935c05f0e44f80dfa6
able/c/4c79cbfb8e9e2311be77182893fda5ea4068c836 - https://git.kernel.org/stable/c/2705c5b97f504e831ae1935c05f0e44f80dfa6b3 - https://git.kernel.org/stable/c/81b16286110728674dcf81137be0687c5055e7bf - https://git.kernel.org/stable/c/3aefc6fcfbada57fac27f470602d5565e5b76cb4 - https://git.kernel.org/stable/c/357df1c2f6ace96defd557fad709ed1f9f70e16c - https://git.kernel.org/stable/c/be3f12f16038a558f08fa93cc32fa715746a5235 - https://git.kernel.org/stable/c/122ac6496e4975ddd7ec1edba4f6fc1e15e39478 - https://git.kernel.org/stable/c/606f6366a35a3329545e38129804d65ef26ed7d2
CVE ID: CVE-2023-52866 State: PUBLISHED Published: 2024-05-21T15:31:57.191Z Last Updated: 2025-05-04T07:44:36.238Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks() When CONFIG_HID_UCLOGIC=y and CONFIG_KUNIT_ALL_TESTS=y, launch kernel and then the below user-memory-access bug occurs. In hid_test_uclogic_params_cleanup_event_hooks(),it call uclogic_params_ugee_v2_init_event_hooks() with the first arg=NULL, so when it calls uclogic_params_ugee_v2_has_battery(), the hid_get_drvdata() will access hdev->dev with hdev=NULL, which will cause below user-
c_params_ugee_v2_has_battery(), the hid_get_drvdata() will access hdev->dev with hdev=NULL, which will cause below user-memory-access. So add a fake_device with quirks member and call hid_set_drvdata() to assign hdev->dev->driver_data which avoids the null-ptr-def bug for drvdata->quirks in uclogic_params_ugee_v2_has_battery(). After applying this patch, the below user-memory-access bug never occurs. general protection fault, probably for non-canonical address 0xdffffc0000000329: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000000001948-0x000000000000194f] CPU: 5 PID: 2189 Comm: kunit_try_catch Tainted: G B W N 6.6.0-rc2+ #30 Hardware name: QEMU Standard PC
00000000000194f] CPU: 5 PID: 2189 Comm: kunit_try_catch Tainted: G B W N 6.6.0-rc2+ #30 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:uclogic_params_ugee_v2_init_event_hooks+0x87/0x600 Code: f3 f3 65 48 8b 14 25 28 00 00 00 48 89 54 24 60 31 d2 48 89 fa c7 44 24 30 00 00 00 00 48 c7 44 24 28 02 f8 02 01 48 c1 ea 03 <80> 3c 02 00 0f 85 2c 04 00 00 48 8b 9d 48 19 00 00 48 b8 00 00 00 RSP: 0000:ffff88810679fc88 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 0000000000000000 RDX: 0000000000000329 RSI: ffff88810679fd88 RDI: 0000000000001948 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1020f639f0 R10: ffff888107b1cf87 R11: 00
88 RDI: 0000000000001948 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1020f639f0 R10: ffff888107b1cf87 R11: 0000000000000400 R12: 1ffff11020cf3f92 R13: ffff88810679fd88 R14: ffff888100b97b08 R15: ffff8881030bb080 FS: 0000000000000000(0000) GS:ffff888119e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000005286001 CR4: 0000000000770ee0 DR0: ffffffff8fdd6cf4 DR1: ffffffff8fdd6cf5 DR2: ffffffff8fdd6cf6 DR3: ffffffff8fdd6cf7 DR6: 00000000fffe0ff0 DR7: 0000000000000600 PKRU: 55555554 Call Trace: <TASK> ? die_addr+0x3d/0xa0 ? exc_general_protection+0x144/0x220 ? asm_exc_general_protection+0x22/0x30 ? uclogic_params_ugee_v
? die_addr+0x3d/0xa0 ? exc_general_protection+0x144/0x220 ? asm_exc_general_protection+0x22/0x30 ? uclogic_params_ugee_v2_init_event_hooks+0x87/0x600 ? sched_clock_cpu+0x69/0x550 ? uclogic_parse_ugee_v2_desc_gen_params+0x70/0x70 ? load_balance+0x2950/0x2950 ? rcu_trc_cmpxchg_need_qs+0x67/0xa0 hid_test_uclogic_params_cleanup_event_hooks+0x9e/0x1a0 ? uclogic_params_ugee_v2_init_event_hooks+0x600/0x600 ? __switch_to+0x5cf/0xe60 ? migrate_enable+0x260/0x260 ? __kthread_parkme+0x83/0x150 ? kunit_try_run_case_cleanup+0xe0/0xe0 kunit_generic_run_threadfn_adapter+0x4a/0x90 ? kunit_try_catch_throw+0x80/0x80 kthread+0x2b5/0x380 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x2d/0x70 ? kthread_co
try_catch_throw+0x80/0x80 kthread+0x2b5/0x380 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x2d/0x70 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork_asm+0x11/0x20 </TASK> Modules linked in: Dumping ftrace buffer: (ftrace buffer empty) ---[ end trace 0000000000000000 ]--- RIP: 0010:uclogic_params_ugee_v2_init_event_hooks+0x87/0x600 Code: f3 f3 65 48 8b 14 25 28 00 00 00 48 89 54 24 60 31 d2 48 89 fa c7 44 24 30 00 00 00 00 48 c7 44 24 28 02 f8 02 01 48 c1 ea 03 <80> 3c 02 00 0f 85 2c 04 00 00 48 8b 9d 48 19 00 00 48 b8 00 00 00 RSP: 0000:ffff88810679fc88 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 0000000000000000 RDX: 0000000000000329 RSI: ffff88810679fd88 RD
0010202 RAX: dffffc0000000000 RBX: 0000000000000004 RCX: 0000000000000000 RDX: 0000000000000329 RSI: ffff88810679fd88 RDI: 0000000000001948 RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1020f639f0 R10: ffff888107b1cf87 R11: 0000000000000400 R12: 1ffff11020cf3f92 R13: ffff88810679fd88 R14: ffff888100b97b08 R15: ffff8881030bb080 FS: 0000000000000000(0000) GS:ffff888119e80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000005286001 CR4: 0000000000770ee0 DR0: ffffffff8fdd6cf4 DR1: ---truncated--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/64da1f
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/64da1f6147dac7f8499d4937a0d7ea990bf569e8 - https://git.kernel.org/stable/c/6c8f953728d75104d994893f58801c457274335a - https://git.kernel.org/stable/c/91cfe0bbaa1c434d4271eb6e1d7aaa1fe8d121f6
CVE ID: CVE-2023-52867 State: PUBLISHED Published: 2024-05-21T15:31:57.866Z Last Updated: 2025-05-04T07:44:37.299Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: possible buffer overflow Buffer 'afmt_status' of size 6 could overflow, since index 'afmt_idx' is checked after access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/112d4b02d94bf9fa4f1d3376587878400dd74783 - https://git.kernel.org/stable/c/caaa74541459c4c9e2c10046cf66ad2890483d0f - https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783 - https://git.kernel.org/sta
cf66ad2890483d0f - https://git.kernel.org/stable/c/ddc42881f170f1f518496f5a70447501335fc783 - https://git.kernel.org/stable/c/7b063c93bece827fde237fae1c101bceeee4e896 - https://git.kernel.org/stable/c/347f025a02b3a5d715a0b471fc3b1439c338ad94 - https://git.kernel.org/stable/c/341e79f8aec6af6b0061b8171d77b085835c6a58 - https://git.kernel.org/stable/c/d9b4fa249deaae1145d6fc2b64dae718e5c7a855 - https://git.kernel.org/stable/c/19534a7a225f1bf2da70a9a90d41d0215f8f6b45 - https://git.kernel.org/stable/c/dd05484f99d16715a88eedfca363828ef9a4c2d4
CVE ID: CVE-2023-52868 State: PUBLISHED Published: 2024-05-21T15:31:58.530Z Last Updated: 2025-05-04T07:44:38.572Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow The dev->id value comes from ida_alloc() so it's a number between zero and INT_MAX. If it's too high then these sprintf()s will overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b55f0a9f865be75ca1019aad331f3225f7b50ce8 - https://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521 - https://git.kernel.org/stable/c/3091ab943dfc7b
ttps://git.kernel.org/stable/c/6ad1bf47fbe5750c4d5d8e41337665e193e2c521 - https://git.kernel.org/stable/c/3091ab943dfc7b2578599b0fe203350286fab5bb - https://git.kernel.org/stable/c/3f795fb35c2d8a637efe76b4518216c9319b998c - https://git.kernel.org/stable/c/3a8f4e58e1ee707b4f46a1000b40b86ea3dd509c - https://git.kernel.org/stable/c/77ff34a56b695e228e6daf30ee30be747973d6e8 - https://git.kernel.org/stable/c/0f6b3be28c4d62ef6498133959c72266629bea97 - https://git.kernel.org/stable/c/edbd6bbe40ac524a8f2273ffacc53edf14f3c686 - https://git.kernel.org/stable/c/c99626092efca3061b387043d4a7399bf75fbdd5
CVE ID: CVE-2023-52869 State: PUBLISHED Published: 2024-05-21T15:31:59.168Z Last Updated: 2025-05-04T07:44:44.652Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pstore/platform: Add check for kstrdup Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bb166bdae1a7d7db30e9be7e6ccaba606debc05f - https://git.kernel.org/stable/c/379b120e4f27fd1cf636a5f85570c4d240a3f688 - https://git.kernel.org/stable/c/63f637309baadf81a095f2653e3b807d4b5814b9
e/c/379b120e4f27fd1cf636a5f85570c4d240a3f688 - https://git.kernel.org/stable/c/63f637309baadf81a095f2653e3b807d4b5814b9 - https://git.kernel.org/stable/c/1c426da79f9fc7b761021b5eb44185ba119cd44a - https://git.kernel.org/stable/c/ad5cb6deb41417ef41b9d6ff54f789212108606f - https://git.kernel.org/stable/c/a19d48f7c5d57c0f0405a7d4334d1d38fe9d3c1c
CVE ID: CVE-2023-52870 State: PUBLISHED Published: 2024-05-21T15:31:59.836Z Last Updated: 2025-05-04T07:44:45.981Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2617aa8ceaf30e41d3eb7f5fef3445542bef193a - https://git.kernel.org/stable/c/533ca5153ad6c7b7d47ae0114b14d0333964b946 - https://git.kernel.org/stable/c/dd1f30d68fa98eb672c0a259297b761656a902
able/c/533ca5153ad6c7b7d47ae0114b14d0333964b946 - https://git.kernel.org/stable/c/dd1f30d68fa98eb672c0a259297b761656a9025f - https://git.kernel.org/stable/c/10cc81124407d862f0f747db4baa9c006510b480 - https://git.kernel.org/stable/c/b5ff3e89b4e7f46ad2aa0de7e08d18e6f87d71bc - https://git.kernel.org/stable/c/b82681042724924ae3ba0f2f2eeec217fa31e830
CVE ID: CVE-2023-52871 State: PUBLISHED Published: 2024-05-21T15:32:00.922Z Last Updated: 2025-05-04T07:44:47.112Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: llcc: Handle a second device without data corruption Usually there is only one llcc device. But if there were a second, even a failed probe call would modify the global drv_data pointer. So check if drv_data is valid before overwriting it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c - https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73e
kernel.org/stable/c/cc1a1dcb411fe224f48553cfdcdfe6e61395b69c - https://git.kernel.org/stable/c/5e5b85ea0f4bc484bfe4cc73ead51fa48d2366a0 - https://git.kernel.org/stable/c/995ee1e84e8db7fa5dcdde7dfe0bd7bb6f9bbb8c - https://git.kernel.org/stable/c/f0ef883cae309bc5e8cdfcdbc1b4822732ce20a8 - https://git.kernel.org/stable/c/3565684309e54fa998ea27f37028d67cc3e1dff2 - https://git.kernel.org/stable/c/1143bfb9b055897975aeaea254da148e19524493 - https://git.kernel.org/stable/c/f1a1bc8775b26345aba2be278118999e7f661d3d
CVE ID: CVE-2023-52872 State: PUBLISHED Published: 2024-05-21T15:32:06.610Z Last Updated: 2025-05-04T12:49:44.477Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: fix race condition in status line change on dead connections gsm_cleanup_mux() cleans up the gsm by closing all DLCIs, stopping all timers, removing the virtual tty devices and clearing the data queues. This procedure, however, may cause subsequent changes of the virtual modem status lines of a DLCI. More data is being added the outgoing data queue and the deleted kick timer is restarted to handle this. At this point many resources have already been removed
ata queue and the deleted kick timer is restarted to handle this. At this point many resources have already been removed by the cleanup procedure. Thus, a kernel panic occurs. Fix this by proving in gsm_modem_update() that the cleanup procedure has not been started and the mux is still alive. Note that writing to a virtual tty is already protected by checks against the DLCI specific connection state. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/81a4dd5e6c78f5d8952fa8c9d36565db1fe01444 - https://git.kernel.org/stable/c/df6cfab66ff2a44bd23ad5dd5309cb3421bb6593 - https://git.kernel.org/stable/c/19d34b73234af542cc8a218c
.kernel.org/stable/c/df6cfab66ff2a44bd23ad5dd5309cb3421bb6593 - https://git.kernel.org/stable/c/19d34b73234af542cc8a218cf398dee73cdb1890 - https://git.kernel.org/stable/c/ce4df90333c4fe65acb8b5089fdfe9b955ce976a - https://git.kernel.org/stable/c/3a75b205de43365f80a33b98ec9289785da56243
CVE ID: CVE-2023-52873 State: PUBLISHED Published: 2024-05-21T15:32:07.253Z Last Updated: 2025-05-04T07:44:49.415Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/fbe466f06d4ea18745da0d57540539b7b36936ae - https://git.kernel.org/stable/c/3994387ba3564976731179c4d4a6d7850ddda71a - https://git.kernel.org/stable/c/ca6d565a2319d69d9766e6ecbb5af827fc4afb
able/c/3994387ba3564976731179c4d4a6d7850ddda71a - https://git.kernel.org/stable/c/ca6d565a2319d69d9766e6ecbb5af827fc4afb2b - https://git.kernel.org/stable/c/df1c4a9efa3f5b6fb5e0ae63890230dbe2190b7e - https://git.kernel.org/stable/c/a90239551abc181687f8c0ba60b276f7d75c141e - https://git.kernel.org/stable/c/f6a7c51cf07a399ec067d39f0a22f1817c5c7d2b - https://git.kernel.org/stable/c/1f57f78fbacf630430bf954e5a84caafdfea30c0
CVE ID: CVE-2023-52874 State: PUBLISHED Published: 2024-05-21T15:32:07.937Z Last Updated: 2025-05-04T07:44:50.495Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro In the TDX_HYPERCALL asm, after the TDCALL instruction returns from the untrusted VMM, the registers that the TDX guest shares to the VMM need to be cleared to avoid speculative execution of VMM-provided values. RSI is specified in the bitmap of those registers, but it is missing when zeroing out those registers in the current TDX_HYPERCALL. It was there when it was originally added in commit 752d13305c78 ("x86/t
t those registers in the current TDX_HYPERCALL. It was there when it was originally added in commit 752d13305c78 ("x86/tdx: Expand __tdx_hypercall() to handle more arguments"), but was later removed in commit 1e70c680375a ("x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall()"), which was correct because %rsi is later restored in the "pop %rsi". However a later commit 7a3a401874be ("x86/tdx: Drop flags from __tdx_hypercall()") removed that "pop %rsi" but forgot to add the "xor %rsi, %rsi" back. Fix by adding it back. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2191950d35d8f81620ea8d4e04d983f664fe3a8a - https:
- CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2191950d35d8f81620ea8d4e04d983f664fe3a8a - https://git.kernel.org/stable/c/de4c5bacca4f50233f1f791bec9eeb4dee1b14cd - https://git.kernel.org/stable/c/5d092b66119d774853cc9308522620299048a662
CVE ID: CVE-2023-52875 State: PUBLISHED Published: 2024-05-21T15:32:08.604Z Last Updated: 2025-05-04T07:44:52.032Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6fccee2af400edaed9cf349d506c5971d4762739 - https://git.kernel.org/stable/c/1953e62366da5460dc712e045f94fb0d8918999d - https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a
able/c/1953e62366da5460dc712e045f94fb0d8918999d - https://git.kernel.org/stable/c/d1461f0c9ca0827c03730fe9652ebbf6316a2a95 - https://git.kernel.org/stable/c/001e5def774fa1a8f2b29567c0b0cd3e3a859a96 - https://git.kernel.org/stable/c/d1175cf4bd2b4c5f7c43f677ea1ce9ad2c18d055 - https://git.kernel.org/stable/c/2a18dd653284550900b02107c3c7b3ac5e0eb802 - https://git.kernel.org/stable/c/e61934720af4a58ffd43a63ffdd6f3a0bd7d7b47 - https://git.kernel.org/stable/c/1bf9c204aef4cc55ce46a7ff2d4dc7e5f86551a7 - https://git.kernel.org/stable/c/0d6e24b422a2166a9297a8286ff2e6ab9a5e8cd3
CVE ID: CVE-2023-52876 State: PUBLISHED Published: 2024-05-21T15:32:09.269Z Last Updated: 2025-05-04T07:44:58.429Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cfa68e0ac5dcde43577adadf6f0f26f3b365ad68 - https://git.kernel.org/stable/c/96e9544a0c4faca616b3f9f4034dcd83a14e7f22 - https://git.kernel.org/stable/c/c4070ada5d5155c8d4d17ea64bd2469498
g/stable/c/96e9544a0c4faca616b3f9f4034dcd83a14e7f22 - https://git.kernel.org/stable/c/c4070ada5d5155c8d4d17ea64bd246949889f25b - https://git.kernel.org/stable/c/a540ca0aeae83c2f3964bcb4e383f64ce2ec1783 - https://git.kernel.org/stable/c/b20cfe007a46f8c165d42a05c50a8d3d893e6592 - https://git.kernel.org/stable/c/1639072f6260babd017556e9f236ca2ad589d1e7 - https://git.kernel.org/stable/c/0884393c63cc9a1772f7121a6645ba7bd76feeb9
CVE ID: CVE-2023-52877 State: PUBLISHED Published: 2024-05-21T15:32:09.946Z Last Updated: 2025-05-04T07:44:59.559Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274
dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Add a check for port->partner to avoid dereferencing a NULL pointer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac - https://git.
Program Container: References: - https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac - https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc - https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 - https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b - https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b
CVE ID: CVE-2023-52878 State: PUBLISHED Published: 2024-05-21T15:32:10.616Z Last Updated: 2025-05-04T07:45:00.765Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds If the "struct can_priv::echoo_skb" is accessed out of bounds, this would cause a kernel crash. Instead, issue a meaningful warning message and return with an error. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/826120c9ba68f2d0dbae58e99013929c883d1444 - https://git.kernel.org/stable/c/0d30931f1fa0f
https://git.kernel.org/stable/c/826120c9ba68f2d0dbae58e99013929c883d1444 - https://git.kernel.org/stable/c/0d30931f1fa0fb893fb7d5dc32b6b7edfb775be4 - https://git.kernel.org/stable/c/53c468008a7c9ca3f5fc985951f35ec2acae85bc - https://git.kernel.org/stable/c/8ab67da060157362b2e0926692c659808784708f - https://git.kernel.org/stable/c/6411959c10fe917288cbb1038886999148560057