Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sg+0xfa/0x1d0 [<ffffffff88eadbf5>] do_syscall_64+0x45/0xf0 [<ffffffff890000ea>] entry_SYSCALL_64_after_hwframe+0x6e/0x76 Handle the proper resource release in the RCU callback function mac802154_llsec_key_del_rcu(). Note that if llsec_lookup_key() finds a key, it gets a refcount via llsec_key_get() and locally copies key id from key_entry (which is a list element). So it's safe to call llsec_key_put() and free the list entry after the RCU grace period elapses. Found by Linux Verification Center (linuxtesting.org). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/068ab2759bc0b4daf0b964de61b2731449c86531 - https://git.ker
gram Container: References: - https://git.kernel.org/stable/c/068ab2759bc0b4daf0b964de61b2731449c86531 - https://git.kernel.org/stable/c/d3d858650933d44ac12c1f31337e7110c2071821 - https://git.kernel.org/stable/c/dcd51ab42b7a0431575689c5f74b8b6efd45fc2f - https://git.kernel.org/stable/c/20d3e1c8a1847497269f04d874b2a5818ec29e2d - https://git.kernel.org/stable/c/640297c3e897bd7e1481466a6a5cb9560f1edb88 - https://git.kernel.org/stable/c/49c8951680d7b76fceaee89dcfbab1363fb24fd1 - https://git.kernel.org/stable/c/e8a1e58345cf40b7b272e08ac7b32328b2543e40
CVE ID: CVE-2024-26962 State: PUBLISHED Published: 2024-05-01T05:19:20.579Z Last Updated: 2025-05-04T09:00:54.244Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape For raid456, if reshape is still in progress, then IO across reshape position will wait for reshape to make progress. However, for dm-raid, in following cases reshape will never make progress hence IO will hang: 1) the array is read-only; 2) MD_RECOVERY_WAIT is set; 3) MD_RECOVERY_FROZEN is set; After commit c467e97f079f ("md/raid6: use valid sector values to determine if an I/O shou
3) MD_RECOVERY_FROZEN is set; After commit c467e97f079f ("md/raid6: use valid sector values to determine if an I/O should wait on the reshape") fix the problem that IO across reshape position doesn't wait for reshape, the dm-raid test shell/lvconvert-raid-reshape.sh start to hang: [root@fedora ~]# cat /proc/979/stack [<0>] wait_woken+0x7d/0x90 [<0>] raid5_make_request+0x929/0x1d70 [raid456] [<0>] md_handle_request+0xc2/0x3b0 [md_mod] [<0>] raid_map+0x2c/0x50 [dm_raid] [<0>] __map_bio+0x251/0x380 [dm_mod] [<0>] dm_submit_bio+0x1f0/0x760 [dm_mod] [<0>] __submit_bio+0xc2/0x1c0 [<0>] submit_bio_noacct_nocheck+0x17f/0x450 [<0>] submit_bio_noacct+0x2bc/0x780 [<0>] submit_bio+0x70/0xc0 [<0>] mpage
0 [<0>] submit_bio_noacct_nocheck+0x17f/0x450 [<0>] submit_bio_noacct+0x2bc/0x780 [<0>] submit_bio+0x70/0xc0 [<0>] mpage_readahead+0x169/0x1f0 [<0>] blkdev_readahead+0x18/0x30 [<0>] read_pages+0x7c/0x3b0 [<0>] page_cache_ra_unbounded+0x1ab/0x280 [<0>] force_page_cache_ra+0x9e/0x130 [<0>] page_cache_sync_ra+0x3b/0x110 [<0>] filemap_get_pages+0x143/0xa30 [<0>] filemap_read+0xdc/0x4b0 [<0>] blkdev_read_iter+0x75/0x200 [<0>] vfs_read+0x272/0x460 [<0>] ksys_read+0x7a/0x170 [<0>] __x64_sys_read+0x1c/0x30 [<0>] do_syscall_64+0xc6/0x230 [<0>] entry_SYSCALL_64_after_hwframe+0x6c/0x74 This is because reshape can't make progress. For md/raid, the problem doesn't exist because register new sync_thread d
4 This is because reshape can't make progress. For md/raid, the problem doesn't exist because register new sync_thread doesn't rely on the IO to be done any more: 1) If array is read-only, it can switch to read-write by ioctl/sysfs; 2) md/raid never set MD_RECOVERY_WAIT; 3) If MD_RECOVERY_FROZEN is set, mddev_suspend() doesn't hold 'reconfig_mutex', hence it can be cleared and reshape can continue by sysfs api 'sync_action'. However, I'm not sure yet how to avoid the problem in dm-raid yet. This patch on the one hand make sure raid_message() can't change sync_thread() through raid_message() after presuspend(), on the other hand detect the above 3 cases before wait for IO do be done in dm_sus
gh raid_message() after presuspend(), on the other hand detect the above 3 cases before wait for IO do be done in dm_suspend(), and let dm-raid requeue those IO. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5943a34bf6bab5801e08a55f63e1b8d5bc90dae1 - https://git.kernel.org/stable/c/a8d249d770cb357d16a2097b548d2e4c1c137304 - https://git.kernel.org/stable/c/41425f96d7aa59bc865f60f5dda3d7697b555677
CVE ID: CVE-2024-26963 State: PUBLISHED Published: 2024-05-01T05:19:24.573Z Last Updated: 2025-05-04T09:00:55.552Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove() is called. Do a pm_runtime_get_sync() to make sure module is active before doing any register operations. Doing a pm_runtime_put_sync() should disable the refclk so no need to disable it again. Fixes the below warning at module removel. [ 39.705310] ------------[ cut here ]------------ [ 39.710004] clk:162:3 already disabled [ 39.713941] WARNIN
e removel. [ 39.705310] ------------[ cut here ]------------ [ 39.710004] clk:162:3 already disabled [ 39.713941] WARNING: CPU: 0 PID: 921 at drivers/clk/clk.c:1090 clk_core_disable+0xb0/0xb8 We called of_platform_populate() in .probe() so call the cleanup function of_platform_depopulate() in .remove(). Get rid of the now unnnecessary dwc3_ti_remove_core(). Without this, module re-load doesn't work properly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6c6a45645a2e6a272dfde14eddbb6706de63c25d - https://git.kernel.org/stable/c/7dfed9855397d0df4c6f748d1f66547ab3bad766 - https://git.kernel.org/stable/c/629b534c42d04f07
ps://git.kernel.org/stable/c/7dfed9855397d0df4c6f748d1f66547ab3bad766 - https://git.kernel.org/stable/c/629b534c42d04f0797980f2d1ed105fdb8906975 - https://git.kernel.org/stable/c/3895780fabd120d0fbd54354014e85207b25687c - https://git.kernel.org/stable/c/6661befe41009c210efa2c1bcd16a5cc4cff8a06
CVE ID: CVE-2024-26964 State: PUBLISHED Published: 2024-05-01T05:19:28.437Z Last Updated: 2025-05-04T09:00:57.071Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the following sg_pcopy_to_buffer() can lead to crash since it tries to memcpy to NULL pointer. So return -ENOMEM if kzalloc returns null pointer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4a49
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4a49d24fdec0a802aa686a567a3989a9fdf4e5dd - https://git.kernel.org/stable/c/b2c898469dfc388f619c6c972a28466cbb1442ea - https://git.kernel.org/stable/c/620b6cf2f1a270f48d38e6b8ce199c1acb3e90f4 - https://git.kernel.org/stable/c/962300a360d24c5be5a188cda48da58a37e4304d - https://git.kernel.org/stable/c/7b6cc33593d7ccfc3011b290849cfa899db46757 - https://git.kernel.org/stable/c/be95cc6d71dfd0cba66e3621c65413321b398052
CVE ID: CVE-2024-26965 State: PUBLISHED Published: 2024-05-01T05:19:32.635Z Last Updated: 2025-05-04T09:00:58.832Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel
ile tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/99740c4791dc8019b0d758c5389ca6d1c0604d95 - https://git.kernel.org/stable/c/86bf75d9158f511db7530bc82a84b19a5134d089 - https://git.kernel.org/stable/c/3ff4a0f6a8f0ad4b4ee9e908bdfc3cacb7be4060 - https://git.kernel.org/stable/c/8f562f3b25177c2055b20fd8cf000496f6fa9194 - https://git.kernel.org/stable/c/537040c257ab4cd0673fbae048f3940c8ea2e589 - https://git.kernel.org/stable/c/7e9926fef71e514b4a8ea9d11d5a84d52b181362 - https://git.kernel.org/stable/c/ae99e199037c580b7350bfa3596f447a53bcf01f - https://git.kernel.org/stable/c/ca2cf98d46748373e830a13d85d215d64a2d9bf2
e/c/ae99e199037c580b7350bfa3596f447a53bcf01f - https://git.kernel.org/stable/c/ca2cf98d46748373e830a13d85d215d64a2d9bf2 - https://git.kernel.org/stable/c/e2c02a85bf53ae86d79b5fccf0a75ac0b78e0c96
CVE ID: CVE-2024-26966 State: PUBLISHED Published: 2024-05-01T05:19:36.656Z Last Updated: 2025-05-04T09:01:00.828Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel
ile tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5533686e99b04994d7c4877dc0e4282adc9444a2 - https://git.kernel.org/stable/c/b2dfb216f32627c2f6a8041f2d9d56d102ab87c0 - https://git.kernel.org/stable/c/a09aecb6cb482de88301c43bf00a6c8726c4d34f - https://git.kernel.org/stable/c/3aedcf3755c74dafc187eb76acb04e3e6348b1a9 - https://git.kernel.org/stable/c/185de0b7cdeaad8b89ebd4c8a258ff2f21adba99 - https://git.kernel.org/stable/c/9b4c4546dd61950e80ffdca1bf6925f42b665b03 - https://git.kernel.org/stable/c/7e5432401536117c316d7f3b21d46b64c1514f38 - https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8
e/c/7e5432401536117c316d7f3b21d46b64c1514f38 - https://git.kernel.org/stable/c/5638330150db2cc30b53eed04e481062faa3ece8 - https://git.kernel.org/stable/c/a903cfd38d8dee7e754fb89fd1bebed99e28003d
CVE ID: CVE-2024-26967 State: PUBLISHED Published: 2024-05-01T05:19:41.040Z Last Updated: 2025-05-04T09:01:02.416Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kern
mpile tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/93ff48729211dae55df5d216023be4528d29babb - https://git.kernel.org/stable/c/6a3d70f7802a98e6c28a74f997a264118b9f50cd
CVE ID: CVE-2024-26968 State: PUBLISHED Published: 2024-05-01T05:19:45.880Z Last Updated: 2025-05-04T09:01:03.767Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.
le tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0204247cf3669b6021fb745c3b7f37ae392ab19c - https://git.kernel.org/stable/c/1723629fea8a4e75333196866e10d395463dca72 - https://git.kernel.org/stable/c/604f2d7c46727c5e24fc7faddc980bc1cc0b1011 - https://git.kernel.org/stable/c/bd2b6395671d823caa38d8e4d752de2448ae61e1
CVE ID: CVE-2024-26969 State: PUBLISHED Published: 2024-05-01T05:19:50.580Z Last Updated: 2025-05-04T09:01:05.215Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.
le tested. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e117c6e2d1617520f5f7d7f6f6b395f01d8b5a27 - https://git.kernel.org/stable/c/83fe1bbd9e259ad109827ccfbfc2488e0dea8e94 - https://git.kernel.org/stable/c/851cc19bdb02556fb13629b3e4fef6f2bdb038fe - https://git.kernel.org/stable/c/9de184d4e557d550fb0b7b833b676bda4f269e4f - https://git.kernel.org/stable/c/dd92b159c506804ac57adf3742d9728298bb1255 - https://git.kernel.org/stable/c/b6b31b4c67ea6bd9222e5b73b330554c57f2f90d - https://git.kernel.org/stable/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9 - https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566 -
/c/fc3ac2fcd0a7fad63eba1b359490a4b81720d0f9 - https://git.kernel.org/stable/c/be9e2752d823eca1d5af67014a1844a9176ff566 - https://git.kernel.org/stable/c/1040ef5ed95d6fd2628bad387d78a61633e09429
CVE ID: CVE-2024-26970 State: PUBLISHED Published: 2024-05-01T05:19:55.293Z Last Updated: 2025-05-04T09:01:06.578Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Only compile tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.
le tested. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ae60e3342296f766f88911d39199f77b05f657a6 - https://git.kernel.org/stable/c/b4527ee3de365a742215773d20f07db3e2c06f3b - https://git.kernel.org/stable/c/852db52b45ea96dac2720f108e7c7331cd3738bb - https://git.kernel.org/stable/c/421b135aceace99789c982f6a77ce9476564fb52 - https://git.kernel.org/stable/c/dcb13b5c9ae8743f99a96f392186527c3df89198 - https://git.kernel.org/stable/c/db4066e3ab6b3d918ae2b92734a89c04fe82cc1d - https://git.kernel.org/stable/c/cdbc6e2d8108bc47895e5a901cfcaf799b00ca8d
CVE ID: CVE-2024-26971 State: PUBLISHED Published: 2024-05-01T05:19:59.773Z Last Updated: 2025-05-04T09:01:08.257Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays The frequency table arrays are supposed to be terminated with an empty element. Add such entry to the end of the arrays where it is missing in order to avoid possible out-of-bound access when the table is traversed by functions like qcom_find_freq() or qcom_find_freq_floor(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b0cf3d20
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b0cf3d200e8a72b6d28e6e088c062b4a98cb5eaf - https://git.kernel.org/stable/c/c8f4bef0667947b826848db1c45a645f751357c1 - https://git.kernel.org/stable/c/50c3acd460551cdf9d8ac6fe0c04f2de0e8e0872 - https://git.kernel.org/stable/c/90ad946fff70f312b8d23226afc38c13ddd88c4b
CVE ID: CVE-2024-26972 State: REJECTED Published: 2024-05-01T05:20:04.669Z Last Updated: 2024-12-19T11:17:20.490Z Description: No description available.
CVE ID: CVE-2024-26973 State: PUBLISHED Published: 2024-05-01T05:20:09.420Z Last Updated: 2025-05-04T09:01:14.685Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length. Additional A
ly leak uninitialized information with the handle to userspace. Properly initialize the full handle length. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9840d1897e28f8733cc1e38f97e044f987dc0a63 - https://git.kernel.org/stable/c/f52d7663a10a1266a2d3871a6dd8fd111edc549f - https://git.kernel.org/stable/c/a276c595c3a629170b0f052a3724f755d7c6adc6 - https://git.kernel.org/stable/c/b7fb63e807c6dadf7ecc1d43448c4f1711d7eeee - https://git.kernel.org/stable/c/c8cc05de8e6b5612b6e9f92c385c1a064b0db375 - https://git.kernel.org/stable/c/03a7e3f2ba3ca25f1da1d3898709a08db14c1abb - https://git.kernel.org/stable/c/74f852654b8b7866f153
/git.kernel.org/stable/c/03a7e3f2ba3ca25f1da1d3898709a08db14c1abb - https://git.kernel.org/stable/c/74f852654b8b7866f15323685f1e178d3386c688 - https://git.kernel.org/stable/c/cdd33d54e789d229d6d5007cbf3f53965ca1a5c6 - https://git.kernel.org/stable/c/fde2497d2bc3a063d8af88b258dbadc86bd7b57c
CVE ID: CVE-2024-26974 State: PUBLISHED Published: 2024-05-01T05:20:14.163Z Last Updated: 2025-05-04T09:01:16.054Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - resolve race condition during AER recovery During the PCI AER system's error recovery process, the kernel driver may encounter a race condition with freeing the reset_data structure's memory. If the device restart will take more than 10 seconds the function scheduling that restart will exit due to a timeout, and the reset_data structure will be freed. However, this data structure is used for completion notification after the restart is completed, which le
will be freed. However, this data structure is used for completion notification after the restart is completed, which leads to a UAF bug. This results in a KFENCE bug notice. BUG: KFENCE: use-after-free read in adf_device_reset_worker+0x38/0xa0 [intel_qat] Use-after-free read at 0x00000000bc56fddf (in kfence-#142): adf_device_reset_worker+0x38/0xa0 [intel_qat] process_one_work+0x173/0x340 To resolve this race condition, the memory associated to the container of the work_struct is freed on the worker if the timeout expired, otherwise on the function that schedules the worker. The timeout detection can be done by checking if the caller is still waiting for completion or not by using completion
. The timeout detection can be done by checking if the caller is still waiting for completion or not by using completion_done() function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/daba62d9eeddcc5b1081be7d348ca836c83c59d7 - https://git.kernel.org/stable/c/8e81cd58aee14a470891733181a47d123193ba81 - https://git.kernel.org/stable/c/d03092550f526a79cf1ade7f0dfa74906f39eb71 - https://git.kernel.org/stable/c/4ae5a97781ce7d6ecc9c7055396535815b64ca4f - https://git.kernel.org/stable/c/226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 - https://git.kernel.org/stable/c/8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc - https://git.kernel.org
6f05ea3a09a7a9aef2f7 - https://git.kernel.org/stable/c/8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc - https://git.kernel.org/stable/c/0c2cf5142bfb634c0ef0a1a69cdf37950747d0be - https://git.kernel.org/stable/c/bb279ead42263e9fb09480f02a4247b2c287d828 - https://git.kernel.org/stable/c/7d42e097607c4d246d99225bf2b195b6167a210c
CVE ID: CVE-2024-26975 State: PUBLISHED Published: 2024-05-01T05:20:19.130Z Last Updated: 2025-05-04T09:01:17.281Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix a NULL pointer dereference A NULL pointer dereference is triggered when probing the MMIO RAPL driver on platforms with CPU ID not listed in intel_rapl_common CPU model list. This is because the intel_rapl_common module still probes on such platforms even if 'defaults_msr' is not set after commit 1488ac990ac8 ("powercap: intel_rapl: Allow probing without CPUID match"). Thus the MMIO RAPL rp->priv->defaults is NULL when registering to RAPL frame
_rapl: Allow probing without CPUID match"). Thus the MMIO RAPL rp->priv->defaults is NULL when registering to RAPL framework. Fix the problem by adding sanity check to ensure rp->priv->rapl_defaults is always valid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0641908b906a133f1494c312a71f9fecbe2b6c78 - https://git.kernel.org/stable/c/9b254feb249981b66ccdb1dae54e757789a15ba1 - https://git.kernel.org/stable/c/2f73cf2ae5e0f4e629db5be3a4380ff7807148e6 - https://git.kernel.org/stable/c/2d1f5006ff95770da502f8cee2a224a1ff83866e
CVE ID: CVE-2024-26976 State: PUBLISHED Published: 2024-05-01T05:20:24.025Z Last Updated: 2025-05-04T09:01:18.606Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs is being destroyed. KVM must ensure that none of its workqueue callbacks is running when the last reference to the KVM _module_ is put. Gifting a reference to the associated VM prevents the workqueue callback from dereferencing freed vCPU/VM memory, but does not prevent the KVM mo
e associated VM prevents the workqueue callback from dereferencing freed vCPU/VM memory, but does not prevent the KVM module from being unloaded before the callback completes. Drop the misguided VM refcount gifting, as calling kvm_put_kvm() from async_pf_execute() if kvm_put_kvm() flushes the async #PF workqueue will result in deadlock. async_pf_execute() can't return until kvm_put_kvm() finishes, and kvm_put_kvm() can't return until async_pf_execute() finishes: WARNING: CPU: 8 PID: 251 at virt/kvm/kvm_main.c:1435 kvm_put_kvm+0x2d/0x320 [kvm] Modules linked in: vhost_net vhost vhost_iotlb tap kvm_intel kvm irqbypass CPU: 8 PID: 251 Comm: kworker/8:1 Tainted: G W 6.6.0-rc1-e7af8d17224a-x86/gm
ost vhost_iotlb tap kvm_intel kvm irqbypass CPU: 8 PID: 251 Comm: kworker/8:1 Tainted: G W 6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Workqueue: events async_pf_execute [kvm] RIP: 0010:kvm_put_kvm+0x2d/0x320 [kvm] Call Trace: <TASK> async_pf_execute+0x198/0x260 [kvm] process_one_work+0x145/0x2d0 worker_thread+0x27e/0x3a0 kthread+0xba/0xe0 ret_from_fork+0x2d/0x50 ret_from_fork_asm+0x11/0x20 </TASK> ---[ end trace 0000000000000000 ]--- INFO: task kworker/8:1:251 blocked for more than 120 seconds. Tainted: G W 6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ta