Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-21780 State: PUBLISHED Published: 2025-02-27T02:18:23.543Z Last Updated: 2025-11-03T20:59:26.137Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a - https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab - https://gi
157bc7334f57e64826ec5a4bf992151a - https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab - https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084 - https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de - https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699
CVE ID: CVE-2025-21781 State: PUBLISHED Published: 2025-02-27T02:18:24.013Z Last Updated: 2025-11-03T20:59:27.625Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Reference counting is used to ensure that batadv_hardif_neigh_node and batadv_hard_iface are not freed before/during batadv_v_elp_throughput_metric_update work is finished. But there isn't a guarantee that the hard if will remain associated with a soft interface up until the work is finished. This fixes a crash triggered by reboot that looks like this: Call trace: batadv_v_mesh_free+0xd0/0x4dc [batman_adv] batadv_v_elp_thr
crash triggered by reboot that looks like this: Call trace: batadv_v_mesh_free+0xd0/0x4dc [batman_adv] batadv_v_elp_throughput_metric_update+0x1c/0xa4 process_one_work+0x178/0x398 worker_thread+0x2e8/0x4d0 kthread+0xd8/0xdc ret_from_fork+0x10/0x20 (the batadv_v_mesh_free call is misleading, and does not actually happen) I was able to make the issue happen more reliably by changing hardif_neigh->bat_v.metric_work work to be delayed work. This allowed me to track down and confirm the fix. [sven@narfation.org: prevent entering batadv_v_elp_get_throughput without soft_iface] Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/167422a07096a6006599067c
dditional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/167422a07096a6006599067c8b55884064fa0b72 - https://git.kernel.org/stable/c/ce3f1545bf8fa28bd05ec113679e8e6cd23af577 - https://git.kernel.org/stable/c/f0a16c6c79768180333f3e41ce63f32730e3c3af - https://git.kernel.org/stable/c/7eb5dd201695645af071592a50026eb780081a72 - https://git.kernel.org/stable/c/072b2787321903287a126c148e8db87dd7ef96fe - https://git.kernel.org/stable/c/2c3fb7df4cc6d043f70d4a8a10f8b915bbfb75e7 - https://git.kernel.org/stable/c/522b1596ea19e327853804da2de60aeb9c5d6f42 - https://git.kernel.org/stable/c/ccb7276a6d26d6f8416e315b43b45e15ee7f29e2
CVE ID: CVE-2025-21782 State: PUBLISHED Published: 2025-02-27T02:18:24.506Z Last Updated: 2025-11-03T20:59:29.018Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: orangefs: fix a oob in orangefs_debug_write I got a syzbot report: slab-out-of-bounds Read in orangefs_debug_write... several people suggested fixes, I tested Al Viro's suggestion and made this patch. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/18b7f841109f697840fe8633cf7ed7d32bd3f91b - https://git.kernel.org/stable/c/09d472a18c0ee1d5b83612cb919e33a1610fea16 - https://git.kernel.org/stable/c/8725882b0f691f8113b230aea
kernel.org/stable/c/09d472a18c0ee1d5b83612cb919e33a1610fea16 - https://git.kernel.org/stable/c/8725882b0f691f8113b230aea9df0256030a63a6 - https://git.kernel.org/stable/c/1da2697307dad281dd690a19441b5ca4af92d786 - https://git.kernel.org/stable/c/2b84a231910cef2e0a16d29294afabfb69112087 - https://git.kernel.org/stable/c/897f496b946fdcfab5983c983e4b513ab6682364 - https://git.kernel.org/stable/c/1c5244299241cf49d8ae7b5054e299cc8faa4e09 - https://git.kernel.org/stable/c/f7c848431632598ff9bce57a659db6af60d75b39
CVE ID: CVE-2025-21783 State: PUBLISHED Published: 2025-02-27T02:18:24.980Z Last Updated: 2025-10-01T19:36:39.998Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios() The gpiochip_get_ngpios() uses chip_*() macros to print messages. However these macros rely on gpiodev to be initialised and set, which is not the case when called via bgpio_init(). In such a case the printing messages will crash on NULL pointer dereference. Replace chip_*() macros by the respective dev_*() ones to avoid such crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.o
dev_*() ones to avoid such crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4d9b2b62e1136d10f661ec4c0c268140b6f74f4f - https://git.kernel.org/stable/c/a7052afa9eae2239e25943baa8817a6a56e8aa68 - https://git.kernel.org/stable/c/189fb76215e479c10731baabb50f1a352d2078f5 - https://git.kernel.org/stable/c/7b4aebeecbbd5b5fe73e35fad3f62ed21aa7ef44
CVE ID: CVE-2025-21784 State: PUBLISHED Published: 2025-02-27T02:18:25.431Z Last Updated: 2025-05-04T07:21:11.128Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() In function psp_init_cap_microcode(), it should bail out when failed to load firmware, otherwise it may cause invalid memory access. References: - https://git.kernel.org/stable/c/3f40a7ff39d9f1d283d5aa9b13e2fb16200aff5f - https://git.kernel.org/stable/c/d1d10bd595539ed82ab59b60249f9bdf0994f678 - https://git.kernel.org/stable/c/e7eb84384335e2abf960c94ec0f8c5b835283777 - https://git.kernel.org/stable
f9bdf0994f678 - https://git.kernel.org/stable/c/e7eb84384335e2abf960c94ec0f8c5b835283777 - https://git.kernel.org/stable/c/a0a455b4bc7483ad60e8b8a50330c1e05bb7bfcf
CVE ID: CVE-2025-21785 State: PUBLISHED Published: 2025-02-27T02:18:25.938Z Last Updated: 2025-11-03T20:59:30.431Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level). Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa - https:
- CVE Program Container: References: - https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa - https://git.kernel.org/stable/c/e4fde33107351ec33f1a64188612fbc6ca659284 - https://git.kernel.org/stable/c/88a3e6afaf002250220793df99404977d343db14 - https://git.kernel.org/stable/c/4ff25f0b18d1d0174c105e4620428bcdc1213860 - https://git.kernel.org/stable/c/ab90894f33c15b14c1cee6959ab6c8dcb09127f8 - https://git.kernel.org/stable/c/715eb1af64779e1b1aa0a7b2ffb81414d9f708e5 - https://git.kernel.org/stable/c/67b99a2b5811df4294c2ad50f9bff3b6a08bd618 - https://git.kernel.org/stable/c/875d742cf5327c93cba1f11e12b08d3cce7a88d2
CVE ID: CVE-2025-21786 State: PUBLISHED Published: 2025-02-27T02:18:26.406Z Last Updated: 2025-05-04T07:21:13.261Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer from the pool The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall. To avoid the use-after-free bug, the pool’s reference must be held until the detachment is comple
ported by Cheung Wall. To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e7c16028a424dd35be1064a68fa318be4359310f - https://git.kernel.org/stable/c/835b69c868f53f959d4986bbecd561ba6f38e492 - https://git.kernel.org/stable/c/e76946110137703c16423baf6ee177b751a34b7e
CVE ID: CVE-2025-21787 State: PUBLISHED Published: 2025-02-27T02:18:26.875Z Last Updated: 2025-11-03T20:59:31.846Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make sure user-provided data contains one nul byte. [1] BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:633 [inline] BUG: KMSAN: uninit-value in string+0x3ec/0x5f0 lib/vsprintf.c:714 string_nocheck lib/vsprintf.c:633 [inline] string+0x3ec/0x5f0 lib/vsprintf.c:714 vsnprintf+0xa5d/0x1960 lib/vsprintf.c:2843 __request_module+0x252/0x9f0 kernel/module/kmod.c:149 team_mode_get driv
:714 vsnprintf+0xa5d/0x1960 lib/vsprintf.c:2843 __request_module+0x252/0x9f0 kernel/module/kmod.c:149 team_mode_get drivers/net/team/team_core.c:480 [inline] team_change_mode drivers/net/team/team_core.c:607 [inline] team_mode_option_set+0x437/0x970 drivers/net/team/team_core.c:1401 team_option_set drivers/net/team/team_core.c:375 [inline] team_nl_options_set_doit+0x1339/0x1f90 drivers/net/team/team_core.c:2662 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x1214/0x12c0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2543 genl_rcv+0x40/0x60 net/netlink/genetlink.c:1219 ne
link.c:1210 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2543 genl_rcv+0x40/0x60 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline] netlink_unicast+0xf52/0x1260 net/netlink/af_netlink.c:1348 netlink_sendmsg+0x10da/0x11e0 net/netlink/af_netlink.c:1892 sock_sendmsg_nosec net/socket.c:718 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:733 ____sys_sendmsg+0x877/0xb60 net/socket.c:2573 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2627 __sys_sendmsg net/socket.c:2659 [inline] __do_sys_sendmsg net/socket.c:2664 [inline] __se_sys_sendmsg net/socket.c:2662 [inline] __x64_sys_sendmsg+0x212/0x3c0 net/socket.c:2662 x64_sys_call+0x2ed6/0x3c30 arch/x86/include/
net/socket.c:2662 [inline] __x64_sys_sendmsg+0x212/0x3c0 net/socket.c:2662 x64_sys_call+0x2ed6/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:47 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/stable/c/7c30483d0f6bdb2230e10e3e4be5167927eac7a0 - https://git.kernel.org/stable/c/7f5af50f3aa0af8cbef9fb76fffeed69e8143f59 - https://git.kernel.org/stable/c/f443687ad20c70320d1248f35f57bf46cac8df0a - https://git.kernel.org/stable/c/4512482e4805dd30bc77dec511f2a2edba5cb868 - https://git.kernel.org/stable/c/d071a91f
0a - https://git.kernel.org/stable/c/4512482e4805dd30bc77dec511f2a2edba5cb868 - https://git.kernel.org/stable/c/d071a91fa614ecdf760c29f61f6a7bfb7df796d6 - https://git.kernel.org/stable/c/4236bf4716589558cc0f3c3612642b2c2141b04e - https://git.kernel.org/stable/c/8401cade1918281177974b32c925afdce750d292 - https://git.kernel.org/stable/c/5bef3ac184b5626ea62385d6b82a1992b89d7940
CVE ID: CVE-2025-21788 State: PUBLISHED Published: 2025-02-27T02:18:27.336Z Last Updated: 2025-10-01T19:36:39.866Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the XDP program doesn't result in XDP_PASS then we leak the memory allocated by am65_cpsw_build_skb(). It is pointless to allocate SKB memory before running the XDP program as we would be wasting CPU cycles for cases other than XDP_PASS. Move the SKB allocation after evaluating the XDP program result. This fixes the memleak. A performance boost is seen for XDP_DROP test. XDP_DROP test: Before: 460256 rx/
program result. This fixes the memleak. A performance boost is seen for XDP_DROP test. XDP_DROP test: Before: 460256 rx/s 0 err/s After: 784130 rx/s 0 err/s Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1bba1d042107167164a0ae3a843fdf650ab005d7 - https://git.kernel.org/stable/c/dc11f049612b9d926aca2e55f8dc9d82850d0da3 - https://git.kernel.org/stable/c/5db843258de1e4e6b1ef1cbd1797923c9e3de548
CVE ID: CVE-2025-21789 State: PUBLISHED Published: 2025-02-27T02:18:27.817Z Last Updated: 2025-10-01T19:36:39.729Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit system") would cause an undefined shift and an out-of-bounds read. Commit 8bd795fedb84 ("arm64: csum: Fix OoB access in IP checksum code for negative lengths") fixes the same issue on ARM64. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/964a8895704a22efc06a2a3276b624a5ae985a06 -
Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/964a8895704a22efc06a2a3276b624a5ae985a06 - https://git.kernel.org/stable/c/9f15a8df542c0f08732a67d1a14ee7c22948fb97 - https://git.kernel.org/stable/c/d6508ffff32b44b6d0de06704034e4eef1c307a7 - https://git.kernel.org/stable/c/6287f1a8c16138c2ec750953e35039634018c84a
CVE ID: CVE-2025-21790 State: PUBLISHED Published: 2025-02-27T02:18:28.375Z Last Updated: 2025-11-03T20:59:33.266Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vxlan_init() must check vxlan_vnigroup_init() success otherwise a crash happens later, spotted by syzbot. Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000160-0x0000000000000167] CPU: 0 UID: 0 PID: 7313 Comm: syz-executor147 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Hardware name: QEMU Stand
UID: 0 PID: 7313 Comm: syz-executor147 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:vxlan_vnigroup_uninit+0x89/0x500 drivers/net/vxlan/vxlan_vnifilter.c:912 Code: 00 48 8b 44 24 08 4c 8b b0 98 41 00 00 49 8d 86 60 01 00 00 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4d 04 00 00 49 8b 86 60 01 00 00 48 ba 00 00 00 RSP: 0018:ffffc9000cc1eea8 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff8672effb RDX: 000000000000002c RSI: ffffffff8672ecb9 RDI: ffff8880461b4f18 RBP: ffff8880461b4ef4 R08: 0000000000000001 R09
72effb RDX: 000000000000002c RSI: ffffffff8672ecb9 RDI: ffff8880461b4f18 RBP: ffff8880461b4ef4 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000020000 R13: ffff8880461b0d80 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007fecfa95d6c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fecfa95cfb8 CR3: 000000004472c000 CR4: 0000000000352ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> vxlan_uninit+0x1ab/0x200 drivers/net/vxlan/vxlan_core.c:2942 unregister_netdevice_many_
0000000000400 Call Trace: <TASK> vxlan_uninit+0x1ab/0x200 drivers/net/vxlan/vxlan_core.c:2942 unregister_netdevice_many_notify+0x12d6/0x1f30 net/core/dev.c:11824 unregister_netdevice_many net/core/dev.c:11866 [inline] unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11736 register_netdevice+0x1829/0x1eb0 net/core/dev.c:10901 __vxlan_dev_create+0x7c6/0xa30 drivers/net/vxlan/vxlan_core.c:3981 vxlan_newlink+0xd1/0x130 drivers/net/vxlan/vxlan_core.c:4407 rtnl_newlink_create net/core/rtnetlink.c:3795 [inline] __rtnl_newlink net/core/rtnetlink.c:3906 [inline] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/79aea5e55156c
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/79aea5e55156c87dc570e43fcd8bba01b9d6ab3f - https://git.kernel.org/stable/c/a303649b99b64858d62ce7428125d8e71675d2b6 - https://git.kernel.org/stable/c/e860f847787fbbf0d8dacd638c019c7c3d4a9bd3 - https://git.kernel.org/stable/c/3215f5aafc49aaa993991633833854694e73b439 - https://git.kernel.org/stable/c/5805402dcc56241987bca674a1b4da79a249bab7
CVE ID: CVE-2025-21791 State: PUBLISHED Published: 2025-02-27T02:18:29.014Z Last Updated: 2025-11-03T20:59:34.647Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip_out() Add rcu_read_lock() / rcu_read_unlock() pair to avoid a potential UAF. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e - https://git.kernel.org/stable/c/20a3489
es: - https://git.kernel.org/stable/c/6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e - https://git.kernel.org/stable/c/20a3489b396764cc9376e32a9172bee26a89dc3b - https://git.kernel.org/stable/c/5bb4228c32261d06e4fbece37ec3828bcc005b6b - https://git.kernel.org/stable/c/c7574740be8ce68a57d0aece24987b9be2114c3c - https://git.kernel.org/stable/c/c40cb5c03e37552d6eff963187109e2c3f78ef6f - https://git.kernel.org/stable/c/022cac1c693add610ae76ede03adf4d9d5a2cf21 - https://git.kernel.org/stable/c/7b81425b517accefd46bee854d94954f5c57e019 - https://git.kernel.org/stable/c/6d0ce46a93135d96b7fa075a94a88fe0da8e8773
CVE ID: CVE-2025-21792 State: PUBLISHED Published: 2025-02-27T02:18:29.653Z Last Updated: 2025-11-03T20:59:36.026Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt If an AX25 device is bound to a socket by setting the SO_BINDTODEVICE socket option, a refcount leak will occur in ax25_release(). Commit 9fd75b66b8f6 ("ax25: Fix refcount leaks caused by ax25_cb_del()") added decrement of device refcounts in ax25_release(). In order for that to work correctly the refcounts must already be incremented when the device is bound to the socket. An AX25 device can be bound to
rrectly the refcounts must already be incremented when the device is bound to the socket. An AX25 device can be bound to a socket by either calling ax25_bind() or setting SO_BINDTODEVICE socket option. In both cases the refcounts should be incremented, but in fact it is done only in ax25_bind(). This bug leads to the following issue reported by Syzkaller: ================================================================ refcount_t: decrement hit 0; leaking memory. WARNING: CPU: 1 PID: 5932 at lib/refcount.c:31 refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31 Modules linked in: CPU: 1 UID: 0 PID: 5932 Comm: syz-executor424 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Hardware na
ed in: CPU: 1 UID: 0 PID: 5932 Comm: syz-executor424 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x1ed/0x210 lib/refcount.c:31 Call Trace: <TASK> __refcount_dec include/linux/refcount.h:336 [inline] refcount_dec include/linux/refcount.h:351 [inline] ref_tracker_free+0x710/0x820 lib/ref_tracker.c:236 netdev_tracker_free include/linux/netdevice.h:4156 [inline] netdev_put include/linux/netdevice.h:4173 [inline] netdev_put include/linux/netdevice.h:4169 [inline] ax25_release+0x33f/0xa10 net/ax25/af_ax25.c:1069 __sock_release+0xb0/0x270 net/socket.c:640 s
/netdevice.h:4169 [inline] ax25_release+0x33f/0xa10 net/ax25/af_ax25.c:1069 __sock_release+0xb0/0x270 net/socket.c:640 sock_close+0x1c/0x30 net/socket.c:1408 ... do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... </TASK> ================================================================ Fix the implementation of ax25_setsockopt() by adding increment of refcounts for the new device bound, and decrement of refcounts for the old unbound device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/90056ece99966182dc0e367f3fd2afab46ada
lnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/90056ece99966182dc0e367f3fd2afab46ada847 - https://git.kernel.org/stable/c/94a0de224ed52eb2ecd4f4cb1b937b674c9fb955 - https://git.kernel.org/stable/c/b58f7ca86a7b8e480c06e30c5163c5d2f4e24023 - https://git.kernel.org/stable/c/470bda72fda0fcf54300466d70ce2de62f7835d2 - https://git.kernel.org/stable/c/bca0902e61731a75fc4860c8720168d9f1bae3b6
CVE ID: CVE-2025-21793 State: PUBLISHED Published: 2025-02-27T02:18:30.281Z Last Updated: 2025-10-01T19:36:39.316Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in the spi-nor commands, both dummy bus cycle bytes and width are zero. Because of the cpu's warning when divided by zero, the warning should be avoided. Return just zero to avoid such calculations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/966328191b4c389c0f2159fa242915f51cbc1679 - https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3
stable/c/966328191b4c389c0f2159fa242915f51cbc1679 - https://git.kernel.org/stable/c/4df6f005bef04a3dd16c028124a1b5684db3922b - https://git.kernel.org/stable/c/7434135553bc03809a55803ee6a8dcaae6240d55 - https://git.kernel.org/stable/c/3588b1c0fde2f58d166e3f94a5a58d64b893526c
CVE ID: CVE-2025-21794 State: PUBLISHED Published: 2025-02-27T02:18:30.907Z Last Updated: 2025-11-03T20:59:37.420Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() Syzbot[1] has detected a stack-out-of-bounds read of the ep_addr array from hid-thrustmaster driver. This array is passed to usb_check_int_endpoints function from usb.c core driver, which executes a for loop that iterates over the elements of the passed array. Not finding a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel. To fix th
a null element at the end of the array, it tries to read the next, non-existent element, crashing the kernel. To fix this, a 0 element was added at the end of the array to break the for loop. [1] https://syzkaller.appspot.com/bug?extid=9c9179ac46169c56c1ad Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/436f48c864186e9413d1b7c6e91767cc9e1a65b8 - https://git.kernel.org/stable/c/f3ce05283f6cb6e19c220f5382def43dc5bd56b9 - https://git.kernel.org/stable/c/cdd9a1ea23ff1a272547217100663e8de4eada40 - https://git.kernel.org/stable/c/73e36a699b9f46322ffb81f072a24e64f728dba7 - https://git.kernel.org/stable/c/0b43d98ff29be3144e86