Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-42196 State: PUBLISHED Published: 2024-12-06T14:47:34.691Z Last Updated: 2024-12-06T17:46:09.269Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: Launch Problem Types: CWE-532 Description: HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117910
CVE ID: CVE-2024-42200 State: PUBLISHED Published: 2025-04-15T18:00:17.561Z Last Updated: 2025-04-15T18:32:36.345Z Vendors: HCL Software Products: HCL BigFix Platform Problem Types: CWE-79 Description: HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting (XSS) attack, due to a potentially weak validation of user input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120585
CVE ID: CVE-2024-42207 State: PUBLISHED Published: 2025-02-05T15:11:01.319Z Last Updated: 2025-02-05T15:35:41.342Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: HCL Software Products: iAutomate Problem Types: CWE-384 Description: HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from their authenticated session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118946
CVE ID: CVE-2024-42208 State: PUBLISHED Published: 2025-04-04T05:22:59.531Z Last Updated: 2025-04-04T14:17:34.859Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL Connections Problem Types: CWE-200 Description: HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120347
CVE ID: CVE-2024-42209 State: PUBLISHED Published: 2025-07-17T19:24:29.065Z Last Updated: 2025-07-17T20:04:32.682Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: Connections Problem Types: CWE-200 Description: HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive information they are not entitled to, which is caused by improper handling of request data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122628
CVE ID: CVE-2024-42212 State: PUBLISHED Published: 2025-05-05T18:40:57.390Z Last Updated: 2025-05-05T19:01:02.378Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL BigFix Compliance Problem Types: CWE-1275 Description: HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery (CSRF) attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961
CVE ID: CVE-2024-42213 State: PUBLISHED Published: 2025-05-05T19:00:33.692Z Last Updated: 2025-05-05T19:05:39.547Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL BigFix Compliance Problem Types: CWE-531 Description: HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieved via predictable URLs or misconfigured permissions, leading to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120961
CVE ID: CVE-2024-42218 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-08T13:31:23.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: 1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific security mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://app-updates.agilebits.com - https://support.1password.com/kb/202408/
CVE ID: CVE-2024-42219 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-12T17:06:45.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: 1Password 8 before 8.10.36 for macOS allows local attackers to exfiltrate vault items because XPC inter-process communication validation is insufficient. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://app-updates.agilebits.com - https://support.1password.com/kb/202408a/
CVE ID: CVE-2024-42220 State: PUBLISHED Published: 2024-12-18T22:40:41.427Z Last Updated: 2024-12-19T16:44:19.193Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Microsoft Products: Outlook Problem Types: CWE-347 Description: A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
lication's permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1972
CVE ID: CVE-2024-42222 State: PUBLISHED Published: 2024-08-07T07:16:13.765Z Last Updated: 2025-03-14T15:57:32.158Z Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: CWE-200 Description: In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network details for domain admin and normal user accounts. This vulnerability compromises tenant isolation, potentially leading to unauthorised access to network details, configurations and data. Affected users are advised to upgrade to version 4.19.1.1 to address this issue. Users on older versions of CloudStack considering to upgrade, can skip 4.19.1.0 and upgrade directly t
dress this issue. Users on older versions of CloudStack considering to upgrade, can skip 4.19.1.0 and upgrade directly to 4.19.1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/apache/cloudstack/issues/9456 - https://cloudstack.apache.org/blog/security-release-advisory-4.19.1.1-4.18.2.3 - https://lists.apache.org/thread/lxqtfd6407prbw3801hb4fz3ot3t8wlj - https://www.shapeblue.com/shapeblue-security-advisory-apache-cloudstack-security-releases-4-18-2-3-and-4-19-1-1/
CVE ID: CVE-2024-42223 State: PUBLISHED Published: 2024-07-30T07:47:04.861Z Last Updated: 2025-11-03T22:02:25.947Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pll_mfactor. Create a new 64 bit variable to hold the calculations. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8167e4d7dc086d4f7ca7897dcff3827e4d22c99a - https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce - https://git.kernel.org/s
7dcff3827e4d22c99a - https://git.kernel.org/stable/c/5c72587d024f087aecec0221eaff2fe850d856ce - https://git.kernel.org/stable/c/e1ba22618758e95e09c9fd30c69ccce38edf94c0 - https://git.kernel.org/stable/c/bd5620439959a7e02012588c724c6ff5143b80af - https://git.kernel.org/stable/c/1663e2474e4d777187d749a5c90ae83232db32bd - https://git.kernel.org/stable/c/8ac224e9371dc3c4eb666033e6b42d05cf5184a1 - https://git.kernel.org/stable/c/1121d8a5c6ed6b8fad492e43b63b386cb6a3a9d8 - https://git.kernel.org/stable/c/1aa1329a67cc214c3b7bd2a14d1301a795760b07
CVE ID: CVE-2024-42224 State: PUBLISHED Published: 2024-07-30T07:47:05.608Z Last Updated: 2025-11-03T22:02:27.444Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. This appears to be intended to guard against the list chip->mdios being empty. However, it is not the correct check as the implementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null()
plementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null() which does return NULL if the list is empty. Flagged by Smatch. Compile tested only. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/47d28dde172696031c880c5778633cdca30394ee - https://git.kernel.org/stable/c/3bf8d70e1455f87856640c3433b3660a31001618 - https://git.kernel.org/stable/c/2a2fe25a103cef73cde356e6d09da10f607e93f5 - https://git.kernel.org/stable/c/8c2c3cca816d074c75a2801d1ca0dea7b0148114 - https://git.kernel.org/stable/c/aa03f591ef31ba603a4a99d05d25a0f21ab1cd89 - https://git.kernel.org/stable
0dea7b0148114 - https://git.kernel.org/stable/c/aa03f591ef31ba603a4a99d05d25a0f21ab1cd89 - https://git.kernel.org/stable/c/3f25b5f1635449036692a44b771f39f772190c1d - https://git.kernel.org/stable/c/f75625db838ade28f032dacd0f0c8baca42ecde4 - https://git.kernel.org/stable/c/4c7f3950a9fd53a62b156c0fe7c3a2c43b0ba19b
CVE ID: CVE-2024-42225 State: PUBLISHED Published: 2024-07-30T07:47:06.397Z Last Updated: 2025-11-03T22:02:28.980Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/dc7f14d00d0c4c21898f3504607f4a31079065a2 - https://git.kernel.org/stable/c/22ea2a7f0b64d323625950414a4496520fb33657 - https://git.kernel.org/stable/c/ff6b26be13032c5fbd6b6a0b24358f8eaac4f3af - https://git.kernel.org/stable/c/64f86337ccfe77fe3be5a9356b0dabde23f
/stable/c/ff6b26be13032c5fbd6b6a0b24358f8eaac4f3af - https://git.kernel.org/stable/c/64f86337ccfe77fe3be5a9356b0dabde23fbb074 - https://git.kernel.org/stable/c/7f819a2f4fbc510e088b49c79addcf1734503578
CVE ID: CVE-2024-42226 State: REJECTED Published: 2024-07-30T07:47:07.319Z Last Updated: 2024-08-11T15:33:01.397Z Description: No description available.
CVE ID: CVE-2024-42227 State: PUBLISHED Published: 2024-07-30T07:47:08.132Z Last Updated: 2025-05-04T09:24:34.200Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix overlapping copy within dml_core_mode_programming [WHY] &mode_lib->mp.Watermark and &locals->Watermark are the same address. memcpy may lead to unexpected behavior. [HOW] memmove should be used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9342da15f2491d8600eca89c8e0da08876fb969b - https://git.kernel.org/stable/c/f1fd8a0a54e6d23a6d16ee29159f247862460fd1
CVE ID: CVE-2024-42228 State: PUBLISHED Published: 2024-07-30T07:47:08.955Z Last Updated: 2025-11-03T22:02:31.909Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Initialize the size before calling amdgpu_vce_cs_reloc, such as case 0x03000001. V2: To really improve the handling we would actually need to have a separate value of 0xffffffff.(Christian) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8 - https://git.kernel.org/stable/c/3b5057594
: - https://git.kernel.org/stable/c/d35cf41c8eb5d9fe95b21ae6ee2910f9ba4878e8 - https://git.kernel.org/stable/c/3b505759447637dcccb50cbd98ec6f8d2a04fc46 - https://git.kernel.org/stable/c/df02642c21c984303fe34c3f7d72965792fb1a15 - https://git.kernel.org/stable/c/da6a85d197888067e8d38b5d22c986b5b5cab712 - https://git.kernel.org/stable/c/9ee1534ecdd5b4c013064663502d7fde824d2144 - https://git.kernel.org/stable/c/855ae72c20310e5402b2317fc537d911e87537ef - https://git.kernel.org/stable/c/f8f120b3de48b8b6bdf8988a9b334c2d61c17440 - https://git.kernel.org/stable/c/88a9a467c548d0b3c7761b4fd54a68e70f9c0944
CVE ID: CVE-2024-42229 State: PUBLISHED Published: 2024-07-30T07:47:09.817Z Last Updated: 2025-11-03T22:02:33.387Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer after use I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding cryptographic information should be zeroized once they are no longer needed. Accomplish this by using kfree_sensitive for buffers that previously held the private key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/89b9b6fa4463daf820e6a5ef65c3b0c2db239513 - https://git.kernel.
lnrichment: References: - https://git.kernel.org/stable/c/89b9b6fa4463daf820e6a5ef65c3b0c2db239513 - https://git.kernel.org/stable/c/b716e9c3603ee95ed45e938fe47227d22cf3ec35 - https://git.kernel.org/stable/c/9db8c299a521813630fcb4154298cb60c37f3133 - https://git.kernel.org/stable/c/71dd428615375e36523f4d4f7685ddd54113646d - https://git.kernel.org/stable/c/28c8d274848feba552e95c5c2a7e3cfe8f15c534 - https://git.kernel.org/stable/c/b502d4a08875ea2b4ea5d5b28dc7c991c8b90cfb - https://git.kernel.org/stable/c/f58679996a831754a356974376f248aa0af2eb8e - https://git.kernel.org/stable/c/23e4099bdc3c8381992f9eb975c79196d6755210
CVE ID: CVE-2024-42230 State: PUBLISHED Published: 2024-07-30T07:47:10.703Z Last Updated: 2025-11-03T22:02:34.842Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000,
to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c550679d604798d9fed8a5b2bb5693448a25407c - https://git.kernel.org/stable/c/d10e3c39001e9194b9a1bfd6979bd3fa19dccdc5 - https://git.kernel.org/stable/c/8c6506616386ce37e59b2745fc481c6713fae4f3 - https://git.kernel.org/stable/c/21a741eb75f80397e5f7d3739e24d7d75e619011
CVE ID: CVE-2024-42231 State: PUBLISHED Published: 2024-07-30T07:47:11.409Z Last Updated: 2025-05-04T09:24:39.735Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space() returns the total size of metadata (or system) block groups, which can be allocated from unallocated disk space. The logic is wrong on zoned mode in two places. First, the calculation of data_chunk_size is wrong. We always allocate one zone as one chunk, and no partial allocation of a zone. So, we should use zone_size (= data_sinfo->chunk_size) as it is. Second, the result "avail"
rtial allocation of a zone. So, we should use zone_size (= data_sinfo->chunk_size) as it is. Second, the result "avail" may not be zone aligned. Since we always allocate one zone as one chunk on zoned mode, returning non-zone size aligned bytes will result in less pressure on the async metadata reclaim process. This is serious for the nearly full state with a large zone size device. Allowing over-commit too much will result in less async reclaim work and end up in ENOSPC. We can align down to the zone size to avoid that. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8548903b1999bba02a2b894ad750ab8eb1f40307 - https://
CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8548903b1999bba02a2b894ad750ab8eb1f40307 - https://git.kernel.org/stable/c/64d2c847ba380e07b9072d65a50aa6469d2aa43f
CVE ID: CVE-2024-42232 State: PUBLISHED Published: 2024-08-07T15:14:23.074Z Last Updated: 2025-11-03T22:02:36.305Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after cancel_delayed_work_sync() runs -- __close_session() doesn't mess with the delayed work in order to avoid interfering with the hunting interval logic. This pa
lose_session() doesn't mess with the delayed work in order to avoid interfering with the hunting interval logic. This part was missed in commit b5d91704f53e ("libceph: behave in mon_fault() if cur_mon < 0") and use-after-free can still ensue on monc and objects that hang off of it, with monc->auth and monc->monmap being particularly susceptible to quickly being reused. To fix this: - clear monc->cur_mon and monc->hunting as part of closing the session in ceph_monc_stop() - bail from delayed_work() if monc->cur_mon is cleared, similar to how it's done in mon_fault() and finish_hunting() (based on monc->hunting) - call cancel_delayed_work_sync() after the session is closed Additional Analyst N
sh_hunting() (based on monc->hunting) - call cancel_delayed_work_sync() after the session is closed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1177afeca833174ba83504688eec898c6214f4bf - https://git.kernel.org/stable/c/63e5d035e3a7ab7412a008f202633c5e6a0a28ea - https://git.kernel.org/stable/c/34b76d1922e41da1fa73d43b764cddd82ac9733c - https://git.kernel.org/stable/c/20cf67dcb7db842f941eff1af6ee5e9dc41796d7 - https://git.kernel.org/stable/c/2d33654d40a05afd91ab24c9a73ab512a0670a9a - https://git.kernel.org/stable/c/9525af1f58f67df387768770fcf6d6a8f23aee3d - https://git.kernel.org/stable/c/33d38c5da17f8db2d80e811b7829
nel.org/stable/c/9525af1f58f67df387768770fcf6d6a8f23aee3d - https://git.kernel.org/stable/c/33d38c5da17f8db2d80e811b7829d2822c10625e - https://git.kernel.org/stable/c/69c7b2fe4c9cc1d3b1186d1c5606627ecf0de883
CVE ID: CVE-2024-42233 State: PUBLISHED Published: 2024-08-07T15:14:23.858Z Last Updated: 2025-05-04T09:24:42.605Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: filemap: replace pte_offset_map() with pte_offset_map_nolock() The vmf->ptl in filemap_fault_recheck_pte_none() is still set from handle_pte_fault(). But at the same time, we did a pte_unmap(vmf->pte). After a pte_unmap(vmf->pte) unmap and rcu_read_unlock(), the page table may be racily changed and vmf->ptl maybe fails to protect the actual page table. Fix this by replacing pte_offset_map() with pte_offset_map_nolock(). As David said, the PTL pointer might be stale so
. Fix this by replacing pte_offset_map() with pte_offset_map_nolock(). As David said, the PTL pointer might be stale so if we continue to use it infilemap_fault_recheck_pte_none(), it might trigger UAF. Also, if the PTL fails, the issue fixed by commit 58f327f2ce80 ("filemap: avoid unnecessary major faults in filemap_fault()") might reappear. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6a6c2aec1a89506595801b4cf7e8eef035f33748 - https://git.kernel.org/stable/c/24be02a42181f0707be0498045c4c4b13273b16d
CVE ID: CVE-2024-42234 State: PUBLISHED Published: 2024-08-07T15:14:24.467Z Last Updated: 2025-05-04T09:24:43.812Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mm: fix crashes from deferred split racing folio migration Even on 6.10-rc6, I've been seeing elusive "Bad page state"s (often on flags when freeing, yet the flags shown are not bad: PG_locked had been set and cleared??), and VM_BUG_ON_PAGE(page_ref_count(page) == 0)s from deferred_split_scan()'s folio_put(), and a variety of other BUG and WARN symptoms implying double free by deferred split and large folio migration. 6.7 commit 9bcef5973e31 ("mm: memcg: fix split queu
ms implying double free by deferred split and large folio migration. 6.7 commit 9bcef5973e31 ("mm: memcg: fix split queue list crash when large folio migration") was right to fix the memcg-dependent locking broken in 85ce2c517ade ("memcontrol: only transfer the memcg data for migration"), but missed a subtlety of deferred_split_scan(): it moves folios to its own local list to work on them without split_queue_lock, during which time folio->_deferred_list is not empty, but even the "right" lock does nothing to secure the folio and the list it is on. Fortunately, deferred_split_scan() is careful to use folio_try_get(): so folio_migrate_mapping() can avoid the race by folio_undo_large_rmappable(
t_scan() is careful to use folio_try_get(): so folio_migrate_mapping() can avoid the race by folio_undo_large_rmappable() while the old folio's reference count is temporarily frozen to 0 - adding such a freeze in the !mapping case too (originally, folio lock and unmapping and no swap cache left an anon folio unreachable, so no freezing was needed there: but the deferred split queue offers a way to reach it). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/fc7facce686b64201dbf0b9614cc1d0bfad70010 - https://git.kernel.org/stable/c/be9581ea8c058d81154251cb0695987098996cad
CVE ID: CVE-2024-42235 State: PUBLISHED Published: 2024-08-07T15:14:25.070Z Last Updated: 2025-05-04T09:24:45.510Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() crst_table_free() used to work with NULL pointers before the conversion to ptdescs. Since crst_table_free() can be called with a NULL pointer (error handling in crst_table_upgrade() add an explicit check. Also add the same check to base_crst_free() for consistency reasons. In real life this should not happen, since order two GFP_KERNEL allocations will not fail, unless FAIL_PAGE_ALLOC is enabled and
ife this should not happen, since order two GFP_KERNEL allocations will not fail, unless FAIL_PAGE_ALLOC is enabled and used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/794fa52b94637d6b2e8c9474fbe3983af5c9f046 - https://git.kernel.org/stable/c/f80bd8bb6f380bc265834c46058d38b34174813e - https://git.kernel.org/stable/c/b5efb63acf7bddaf20eacfcac654c25c446eabe8