Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
andling path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/efdc3f54299835ddef23bea651c753c4d467010b - https://git.kernel.org/stable/c/935124dd5883b5de68dc5a94f582480a10643dc9
CVE ID: CVE-2024-42113 State: PUBLISHED Published: 2024-07-30T07:46:06.942Z Last Updated: 2025-05-04T09:23:17.610Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INTx interrupts, wx->num_q_vectors is uninitialized. Thus there will be kernel panic in wx_alloc_q_vectors() to allocate queue vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9edc7a83cd40ac96ff14fe3a17a38f7ace6611df - https://git.kernel.org/stable/c/c98969226d1fe0c1dd779db8b1c444bc5294fc83 - https://git.kernel.or
4fe3a17a38f7ace6611df - https://git.kernel.org/stable/c/c98969226d1fe0c1dd779db8b1c444bc5294fc83 - https://git.kernel.org/stable/c/7c36711a2cd8059c2d24f5e5c1d76e8ea2d5613c
CVE ID: CVE-2024-42114 State: PUBLISHED Published: 2024-07-30T07:46:07.596Z Last Updated: 2025-11-03T22:01:48.519Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlockups, setting NL80211_ATTR_TXQ_QUANTUM to 2^31. We had a similar issue in sch_fq, fixed with commit d9e15a273306 ("pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM") watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [kworker/1:0:24] Modules linked in: irq event stamp: 131135 hardirqs last enabled at (131134): [<ffff80008ae8778c>] __exit_to_kernel_mode arch/arm64/kernel/entry-comm
stamp: 131135 hardirqs last enabled at (131134): [<ffff80008ae8778c>] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (131134): [<ffff80008ae8778c>] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (131135): [<ffff80008ae85378>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline] hardirqs last disabled at (131135): [<ffff80008ae85378>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551 softirqs last enabled at (125892): [<ffff80008907e82c>] neigh_hh_init net/core/neighbour.c:1538 [inline] softirqs last enabled at (125892): [<ffff80008907e82c>] neigh_resolve_output+0x268/0x658 net/core/neighb
c:1538 [inline] softirqs last enabled at (125892): [<ffff80008907e82c>] neigh_resolve_output+0x268/0x658 net/core/neighbour.c:1553 softirqs last disabled at (125896): [<ffff80008904166c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 CPU: 1 PID: 24 Comm: kworker/1:0 Not tainted 6.9.0-rc7-syzkaller-gfda5695d692c #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Workqueue: mld mld_ifc_work pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del include/linux/list.h:195 [inline] pc : __list_del_entry include/linux/list.h:218 [inline] pc : list_move_tail include/linux/list.h:310 [inline] pc : fq_tin_dequeue include/ne
y include/linux/list.h:218 [inline] pc : list_move_tail include/linux/list.h:310 [inline] pc : fq_tin_dequeue include/net/fq_impl.h:112 [inline] pc : ieee80211_tx_dequeue+0x6b8/0x3b4c net/mac80211/tx.c:3854 lr : __list_del_entry include/linux/list.h:218 [inline] lr : list_move_tail include/linux/list.h:310 [inline] lr : fq_tin_dequeue include/net/fq_impl.h:112 [inline] lr : ieee80211_tx_dequeue+0x67c/0x3b4c net/mac80211/tx.c:3854 sp : ffff800093d36700 x29: ffff800093d36a60 x28: ffff800093d36960 x27: dfff800000000000 x26: ffff0000d800ad50 x25: ffff0000d800abe0 x24: ffff0000d800abf0 x23: ffff0000e0032468 x22: ffff0000e00324d4 x21: ffff0000d800abf0 x20: ffff0000d800abf8 x19: ffff0000d800abf0 x1
800abf0 x23: ffff0000e0032468 x22: ffff0000e00324d4 x21: ffff0000d800abf0 x20: ffff0000d800abf8 x19: ffff0000d800abf0 x18: ffff800093d363c0 x17: 000000000000d476 x16: ffff8000805519dc x15: ffff7000127a6cc8 x14: 1ffff000127a6cc8 x13: 0000000000000004 x12: ffffffffffffffff x11: ffff7000127a6cc8 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff80009287aa08 x4 : 0000000000000008 x3 : ffff80008034c7fc x2 : ffff0000e0032468 x1 : 00000000da0e46b8 x0 : ffff0000e0032470 Call trace: __list_del include/linux/list.h:195 [inline] __list_del_entry include/linux/list.h:218 [inline] list_move_tail include/linux/list.h:310 [inline] fq_tin_
195 [inline] __list_del_entry include/linux/list.h:218 [inline] list_move_tail include/linux/list.h:310 [inline] fq_tin_dequeue include/net/fq_impl.h:112 [inline] ieee80211_tx_dequeue+0x6b8/0x3b4c net/mac80211/tx.c:3854 wake_tx_push_queue net/mac80211/util.c:294 [inline] ieee80211_handle_wake_tx_queue+0x118/0x274 net/mac80211/util.c:315 drv_wake_tx_queue net/mac80211/driver-ops.h:1350 [inline] schedule_and_wake_txq net/mac80211/driver-ops.h:1357 [inline] ieee80211_queue_skb+0x18e8/0x2244 net/mac80211/tx.c:1664 ieee80211_tx+0x260/0x400 net/mac80211/tx.c:1966 ieee80211_xmit+0x278/0x354 net/mac80211/tx.c:2062 __ieee80211_subif_start_xmit+0xab8/0x122c net/mac80211/tx.c:4338 ieee80211_subif_start
x278/0x354 net/mac80211/tx.c:2062 __ieee80211_subif_start_xmit+0xab8/0x122c net/mac80211/tx.c:4338 ieee80211_subif_start_xmit+0xe0/0x438 net/mac80211/tx.c:4532 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x27c/0x938 net/core/dev.c:3547 __dev_queue_xmit+0x1678/0x33fc net/core/dev.c:4341 dev_queue_xmit include/linux/netdevice.h:3091 [inline] neigh_resolve_output+0x558/0x658 net/core/neighbour.c:1563 neigh_output include/net/neighbour.h:542 [inline] ip6_fini ---truncated--- Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
e] ip6_fini ---truncated--- Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/80ac0cc9c0bef984e29637b1efa93d7214b42f53 - https://git.kernel.org/stable/c/33ac5a4eb3d4bea2146658f1b6d1fa86d62d2b22 - https://git.kernel.org/stable/c/3fc06f6d142d2840735543216a60d0a8c345bdec - https://git.kernel.org/stable/c/8a3ac7fb36962c34698f884bd697938054ff2afa - https://git.kernel.org/stable/c/e87c2f098f52aa2fe20258a5bb1738d6a74e9ed7 - https://git.kernel.org/stable/c/d1cba2ea8121e7fdbe1328cea782876b1dd80993
CVE ID: CVE-2024-42115 State: PUBLISHED Published: 2024-07-30T07:46:08.276Z Last Updated: 2025-11-03T22:01:50.018Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs2_free_inode During the stress testing of the jffs2 file system,the following abnormal printouts were found: [ 2430.649000] Unable to handle kernel paging request at virtual address 0069696969696948 [ 2430.649622] Mem abort info: [ 2430.649829] ESR = 0x96000004 [ 2430.650115] EC = 0x25: DABT (current EL), IL = 32 bits [ 2430.650564] SET = 0, FnV = 0 [ 2430.650795] EA = 0, S1PTW = 0 [ 2430.651032] FSC = 0x04: level 0 tr
EL), IL = 32 bits [ 2430.650564] SET = 0, FnV = 0 [ 2430.650795] EA = 0, S1PTW = 0 [ 2430.651032] FSC = 0x04: level 0 translation fault [ 2430.651446] Data abort info: [ 2430.651683] ISV = 0, ISS = 0x00000004 [ 2430.652001] CM = 0, WnR = 0 [ 2430.652558] [0069696969696948] address between user and kernel address ranges [ 2430.653265] Internal error: Oops: 96000004 [#1] PREEMPT SMP [ 2430.654512] CPU: 2 PID: 20919 Comm: cat Not tainted 5.15.25-g512f31242bf6 #33 [ 2430.655008] Hardware name: linux,dummy-virt (DT) [ 2430.655517] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2430.656142] pc : kfree+0x78/0x348 [ 2430.656630] lr : jffs2_free_inode+0x24/0x48 [ 2430.657051] sp :
-SSBS BTYPE=--) [ 2430.656142] pc : kfree+0x78/0x348 [ 2430.656630] lr : jffs2_free_inode+0x24/0x48 [ 2430.657051] sp : ffff800009eebd10 [ 2430.657355] x29: ffff800009eebd10 x28: 0000000000000001 x27: 0000000000000000 [ 2430.658327] x26: ffff000038f09d80 x25: 0080000000000000 x24: ffff800009d38000 [ 2430.658919] x23: 5a5a5a5a5a5a5a5a x22: ffff000038f09d80 x21: ffff8000084f0d14 [ 2430.659434] x20: ffff0000bf9a6ac0 x19: 0169696969696940 x18: 0000000000000000 [ 2430.659969] x17: ffff8000b6506000 x16: ffff800009eec000 x15: 0000000000004000 [ 2430.660637] x14: 0000000000000000 x13: 00000001000820a1 x12: 00000000000d1b19 [ 2430.661345] x11: 0004000800000000 x10: 0000000000000001 x9 : ffff8000084f0
13: 00000001000820a1 x12: 00000000000d1b19 [ 2430.661345] x11: 0004000800000000 x10: 0000000000000001 x9 : ffff8000084f0d14 [ 2430.662025] x8 : ffff0000bf9a6b40 x7 : ffff0000bf9a6b48 x6 : 0000000003470302 [ 2430.662695] x5 : ffff00002e41dcc0 x4 : ffff0000bf9aa3b0 x3 : 0000000003470342 [ 2430.663486] x2 : 0000000000000000 x1 : ffff8000084f0d14 x0 : fffffc0000000000 [ 2430.664217] Call trace: [ 2430.664528] kfree+0x78/0x348 [ 2430.664855] jffs2_free_inode+0x24/0x48 [ 2430.665233] i_callback+0x24/0x50 [ 2430.665528] rcu_do_batch+0x1ac/0x448 [ 2430.665892] rcu_core+0x28c/0x3c8 [ 2430.666151] rcu_core_si+0x18/0x28 [ 2430.666473] __do_softirq+0x138/0x3cc [ 2430.666781] irq_exit+0xf0/0x110 [ 2430.6
[ 2430.666151] rcu_core_si+0x18/0x28 [ 2430.666473] __do_softirq+0x138/0x3cc [ 2430.666781] irq_exit+0xf0/0x110 [ 2430.667065] handle_domain_irq+0x6c/0x98 [ 2430.667447] gic_handle_irq+0xac/0xe8 [ 2430.667739] call_on_irq_stack+0x28/0x54 The parameter passed to kfree was 5a5a5a5a, which corresponds to the target field of the jffs_inode_info structure. It was found that all variables in the jffs_inode_info structure were 5a5a5a5a, except for the first member sem. It is suspected that these variables are not initialized because they were set to 5a5a5a5a during memory testing, which is meant to detect uninitialized memory.The sem variable is initialized in the function jffs2_i_init_once, while
which is meant to detect uninitialized memory.The sem variable is initialized in the function jffs2_i_init_once, while other members are initialized in the function jffs2_init_inode_info. The function jffs2_init_inode_info is called after iget_locked, but in the iget_locked function, the destroy_inode process is triggered, which releases the inode and consequently, the target member of the inode is not initialized.In concurrent high pressure scenarios, iget_locked may enter the destroy_inode branch as described in the code. Since the destroy_inode functionality of jffs2 only releases the target, the fix method is to set target to NULL in jffs2_i_init_once. Additional Analyst Notes: - CVE Pr
ly releases the target, the fix method is to set target to NULL in jffs2_i_init_once. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b6c8b3e31eb88c85094d848a0bd8b4bafe67e4d8 - https://git.kernel.org/stable/c/0b3246052e01e61a55bb3a15b76acb006759fe67 - https://git.kernel.org/stable/c/6d6d94287f6365282bbf41e9a5b5281985970789 - https://git.kernel.org/stable/c/5ca26334fc8a3711fed14db7f9eb1c621be4df65 - https://git.kernel.org/stable/c/751987a5d8ead0cc405fad96e83ebbaa51c82dbc - https://git.kernel.org/stable/c/d0bbbf31462a400bef4df33e22de91864f475455 - https://git.kernel.org/stable/c/05fc1ef892f862c1197b11b288bc00f602d2df0c -
/c/d0bbbf31462a400bef4df33e22de91864f475455 - https://git.kernel.org/stable/c/05fc1ef892f862c1197b11b288bc00f602d2df0c - https://git.kernel.org/stable/c/af9a8730ddb6a4b2edd779ccc0aceb994d616830
CVE ID: CVE-2024-42116 State: REJECTED Published: 2024-07-30T07:46:08.969Z Last Updated: 2024-12-19T11:29:27.889Z Description: No description available.
CVE ID: CVE-2024-42117 State: PUBLISHED Published: 2024-07-30T07:46:09.648Z Last Updated: 2025-05-04T09:23:26.925Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: ASSERT when failing to find index by plane/stream id [WHY] find_disp_cfg_idx_by_plane_id and find_disp_cfg_idx_by_stream_id returns an array index and they return -1 when not found; however, -1 is not a valid index number. [HOW] When this happens, call ASSERT(), and return a positive number (which is fewer than callers' array size) instead. This fixes 4 OVERRUN and 2 NEGATIVE_RETURNS issues reported by Coverity. Additional Analyst Notes: - CVE Program
stead. This fixes 4 OVERRUN and 2 NEGATIVE_RETURNS issues reported by Coverity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a9c047a5cf3135b8b66bd28fbe2c698b9cace0b3 - https://git.kernel.org/stable/c/01eb50e53c1ce505bf449348d433181310288765
CVE ID: CVE-2024-42118 State: PUBLISHED Published: 2024-07-30T07:46:10.486Z Last Updated: 2025-07-11T17:19:55.458Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not return negative stream id for array [WHY] resource_stream_to_stream_idx returns an array index and it return -1 when not found; however, -1 is not a valid array index number. [HOW] When this happens, call ASSERT(), and return a zero instead. This fixes an OVERRUN and an NEGATIVE_RETURNS issues reported by Coverity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a76fa9c4f0
nalyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a76fa9c4f0fc0aa6f517da3fa7d7c23e8a32c7d0 - https://git.kernel.org/stable/c/3ac31c9a707dd1c7c890b95333182f955e9dcb57
CVE ID: CVE-2024-42119 State: PUBLISHED Published: 2024-07-30T07:46:11.314Z Last Updated: 2025-11-03T22:01:51.528Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engine_id [WHY] ENGINE_ID_UNKNOWN = -1 and can not be used as an array index. Plus, it also means it is uninitialized and does not need free audio. [HOW] Skip and return NULL. This fixes 2 OVERRUN issues reported by Coverity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9eb4db08a808e3a3ba59193aeb84a57a6dc4d8c9 - https://git.kernel.org/stable
: References: - https://git.kernel.org/stable/c/9eb4db08a808e3a3ba59193aeb84a57a6dc4d8c9 - https://git.kernel.org/stable/c/eacca028a623f608607d02457122ee5284491e18 - https://git.kernel.org/stable/c/ffa7bd3ca9cfa902b857d1dc9a5f46fededf86c8 - https://git.kernel.org/stable/c/afaaebdee9bb9f26d9e13cc34b33bd0a7bf59488 - https://git.kernel.org/stable/c/874261358d31fc772f2823604167e670983cc1ca - https://git.kernel.org/stable/c/95ad20ee3c4efbb91f9a4ab08e070aa3697f5879 - https://git.kernel.org/stable/c/881fb6afc0004c5e6392ae2848f825bf051dae14 - https://git.kernel.org/stable/c/1357b2165d9ad94faa4c4a20d5e2ce29c2ff29c3
CVE ID: CVE-2024-42120 State: PUBLISHED Published: 2024-07-30T07:46:12.136Z Last Updated: 2025-11-03T22:01:53.081Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipe_ctx has a size of MAX_PIPES so checking its index before accessing the array. This fixes an OVERRUN issue reported by Coverity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b2e9abc95583ac7bbb2c47da4d476a798146dfd6 - https://git.kernel.org/stable/c/0b3702f9d43d163fd05e43b7d7e22e766dbef329 - https://git.kernel.org/stable/c/d2c3645a4a5
- https://git.kernel.org/stable/c/0b3702f9d43d163fd05e43b7d7e22e766dbef329 - https://git.kernel.org/stable/c/d2c3645a4a5ae5d933b4116c305d9d82b8199dbf - https://git.kernel.org/stable/c/96bf81cc1bd058bb8af6e755a548e926e934dfd1 - https://git.kernel.org/stable/c/c5ec2afeeee4c91cebc4eff6d4f1ecf4047259f4 - https://git.kernel.org/stable/c/5396a70e8cf462ec5ccf2dc8de103c79de9489e6
CVE ID: CVE-2024-42121 State: PUBLISHED Published: 2024-07-30T07:46:13.064Z Last Updated: 2025-11-03T22:01:54.568Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msg_id before read or write [WHAT] msg_id is used as an array index and it cannot be a negative value, and therefore cannot be equal to MOD_HDCP_MESSAGE_ID_INVALID (-1). [HOW] Check whether msg_id is valid before reading and setting. This fixes 4 OVERRUN issues reported by Coverity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b5b8837d066cc182ff69fb5629ad32ade54845
Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b5b8837d066cc182ff69fb5629ad32ade5484567 - https://git.kernel.org/stable/c/fbb0701af9734cff13917a4b98b5ee9da2fde48d - https://git.kernel.org/stable/c/ae91ffbc8b8d942e3e7f188728cad557b7ed5ee4 - https://git.kernel.org/stable/c/9933eca6ada0cd612e19522e7a319bcef464c0eb - https://git.kernel.org/stable/c/a31ea49dc8064a557565725cf045944307476a6e - https://git.kernel.org/stable/c/59d99deb330af206a4541db0c4da8f73880fba03
CVE ID: CVE-2024-42122 State: PUBLISHED Published: 2024-07-30T07:46:13.921Z Last Updated: 2025-11-03T19:30:30.784Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc [Why & How] Check return pointer of kzalloc before using it. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/552e7938b4d7fe548fbf29b9950a14c6149d0470 - https://git.kernel.org/stable/c/cd1e565a5b7fa60c349ca8a16db1e61715fe8230 - https://git.kernel.org/stable/c/062edd612fcd300f0f79a36fca5b8b6a5e2fce70 - https://git.kernel.org/stable/c/8e65a1b7118ac
https://git.kernel.org/stable/c/062edd612fcd300f0f79a36fca5b8b6a5e2fce70 - https://git.kernel.org/stable/c/8e65a1b7118acf6af96449e1e66b7adbc9396912
CVE ID: CVE-2024-42123 State: PUBLISHED Published: 2024-07-30T07:46:15.130Z Last Updated: 2025-09-16T08:02:41.978Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix double free err_addr pointer warnings In amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages will be run many times so that double free err_addr in some special case. So set the err_addr to NULL to avoid the warnings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/8e24beb3c2b08a4763f920399a9cc577ed440a1a - https://git.kernel.org/stable/c/506c245f3f1cd989cb89811a7
kernel.org/stable/c/8e24beb3c2b08a4763f920399a9cc577ed440a1a - https://git.kernel.org/stable/c/506c245f3f1cd989cb89811a7f06e04ff8813a0d
CVE ID: CVE-2024-42124 State: PUBLISHED Published: 2024-07-30T07:46:16.052Z Last Updated: 2025-11-03T22:01:56.018Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedf_execute_tmf() non-preemptible Stop calling smp_processor_id() from preemptible code in qedf_execute_tmf90. This results in BUG_ON() when running an RT kernel. [ 659.343280] BUG: using smp_processor_id() in preemptible [00000000] code: sg_reset/3646 [ 659.343282] caller is qedf_execute_tmf+0x8b/0x360 [qedf] Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4f314aadeed8cdf42c8cf
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4f314aadeed8cdf42c8cf30769425b5e44702748 - https://git.kernel.org/stable/c/5ceb40cdee721e13cbe15a0515cacf984e11236b - https://git.kernel.org/stable/c/0a8a91932b2772e75bf3f6d133ca4225d1d3e920 - https://git.kernel.org/stable/c/fa49c65a1cec6a3901ef884fdb24d98068b63493 - https://git.kernel.org/stable/c/b6ded5316ec56e973dcf5f9997945aad01a9f062 - https://git.kernel.org/stable/c/2b9c7787cfcd1e76d873a78f16cf45bfa4b100ea - https://git.kernel.org/stable/c/0d8b637c9c5eeaa1a4e3dfb336f3ff918eb64fec
CVE ID: CVE-2024-42125 State: PUBLISHED Published: 2024-07-30T07:46:22.046Z Last Updated: 2025-05-20T14:27:35.087Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fw: scan offload prohibit all 6 GHz channel if no 6 GHz sband We have some policy via BIOS to block uses of 6 GHz. In this case, 6 GHz sband will be NULL even if it is WiFi 7 chip. So, add NULL handling here to avoid crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/ce4ba62f8bc5195a9a0d49c6235a9c99e619cadc - https://git.kernel.org/stable/c/bb38626f3f97e16e6d368a9ff6daf320f3fe31d
ble/c/ce4ba62f8bc5195a9a0d49c6235a9c99e619cadc - https://git.kernel.org/stable/c/bb38626f3f97e16e6d368a9ff6daf320f3fe31d9
CVE ID: CVE-2024-42126 State: PUBLISHED Published: 2024-07-30T07:46:23.179Z Last Updated: 2025-11-03T22:01:57.533Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. nmi_enter()/nmi_exit() touches per cpu variables which can lead to kernel crash when invoked during real mode interrupt handling (e.g. early HMI/MCE interrupt handler) if percpu allocation comes from vmalloc area. Early HMI/MCE handlers are called through DEFINE_INTERRUPT_HANDLER_NMI() wrapper which invokes nmi_enter/nmi_exit calls. We don't see any issue when percpu allocation is from the embedded first chunk.
which invokes nmi_enter/nmi_exit calls. We don't see any issue when percpu allocation is from the embedded first chunk. However with CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK enabled there are chances where percpu allocation can come from the vmalloc area. With kernel command line "percpu_alloc=page" we can force percpu allocation to come from vmalloc area and can see kernel crash in machine_check_early: [ 1.215714] NIP [c000000000e49eb4] rcu_nmi_enter+0x24/0x110 [ 1.215717] LR [c0000000000461a0] machine_check_early+0xf0/0x2c0 [ 1.215719] --- interrupt: 200 [ 1.215720] [c000000fffd73180] [0000000000000000] 0x0 (unreliable) [ 1.215722] [c000000fffd731b0] [0000000000000000] 0x0 [ 1.215724] [c000000
ffd73180] [0000000000000000] 0x0 (unreliable) [ 1.215722] [c000000fffd731b0] [0000000000000000] 0x0 [ 1.215724] [c000000fffd73210] [c000000000008364] machine_check_early_common+0x134/0x1f8 Fix this by avoiding use of nmi_enter()/nmi_exit() in real mode if percpu first chunk is not embedded. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/fb6675db04c4b79883373edc578d5df7bbc84848 - https://git.kernel.org/stable/c/e2afb26615adf6c3ceaaa7732aa839bcd587a057 - https://git.kernel.org/stable/c/8d3f83dfb23674540c827a8d65fba20aa300b252 - https://git.kernel.org/stable/c/0f37946c62c48a907625348cbc720a7a0c547d1e - https://git.kernel
0c827a8d65fba20aa300b252 - https://git.kernel.org/stable/c/0f37946c62c48a907625348cbc720a7a0c547d1e - https://git.kernel.org/stable/c/2c78c9411e685dbc9eac8c2845111b03501975b8 - https://git.kernel.org/stable/c/0db880fc865ffb522141ced4bfa66c12ab1fbb70
CVE ID: CVE-2024-42127 State: PUBLISHED Published: 2024-07-30T07:46:24.070Z Last Updated: 2025-11-03T22:01:59.030Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/lima: fix shared irq handling on driver remove lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay registered until the very end of the remove process due to the devm usage. This is potentially a bug as the interrupts access device registers which assumes clocks are enabled. A crash can be triggered by removing the driver in a kernel with CON