Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s.cold+0x61/0x10e [ 10.363979] ? wake_up_klogd+0x4a/0x50 [ 10.363983] ? vprintk_emit+0x8f/0x240 [ 10.363986] dwmac4_map_mtl_dma.cold+0x42/0x91 [stmmac] [ 10.364001] stmmac_mtl_configuration+0x1ce/0x7a0 [stmmac] [ 10.364009] ? dwmac410_dma_init_channel+0x70/0x70 [stmmac] [ 10.364020] stmmac_hw_setup.cold+0xf/0xb14 [stmmac] [ 10.364030] ? page_pool_alloc_pages+0x4d/0x70 [ 10.364034] ? stmmac_clear_tx_descriptors+0x6e/0xe0 [stmmac] [ 10.364042] stmmac_open+0x39e/0x920 [stmmac] [ 10.364050] __dev_open+0xf0/0x1a0 [ 10.364054] __dev_change_flags+0x188/0x1f0 [ 10.364057] dev_change_flags+0x26/0x60 [ 10.364059] do_setlink+0x908/0xc40 [ 10.364062] ? do_setlink+0xb10/0xc40 [ 10.364064] ? __nla_validat
e_flags+0x26/0x60 [ 10.364059] do_setlink+0x908/0xc40 [ 10.364062] ? do_setlink+0xb10/0xc40 [ 10.364064] ? __nla_validate_parse+0x4c/0x1a0 [ 10.364068] __rtnl_newlink+0x597/0xa10 [ 10.364072] ? __nla_reserve+0x41/0x50 [ 10.364074] ? __kmalloc_node_track_caller+0x1d0/0x4d0 [ 10.364079] ? pskb_expand_head+0x75/0x310 [ 10.364082] ? nla_reserve_64bit+0x21/0x40 [ 10.364086] ? skb_free_head+0x65/0x80 [ 10.364089] ? security_sock_rcv_skb+0x2c/0x50 [ 10.364094] ? __cond_resched+0x19/0x30 [ 10.364097] ? kmem_cache_alloc_trace+0x15a/0x420 [ 10.364100] rtnl_newlink+0x49/0x70 This change fixes MTL_RXQ_DMA_MAP1 mask issue and channel/queue mapping warning. BugLink: https://bugzilla.kernel.org/show_bug.cg
ge fixes MTL_RXQ_DMA_MAP1 mask issue and channel/queue mapping warning. BugLink: https://bugzilla.kernel.org/show_bug.cgi?id=216195 References: - https://git.kernel.org/stable/c/ad2febdfbd01e1d092a08bfdba92ede79ea05ff3 - https://git.kernel.org/stable/c/508d86ead36cbd8dfb60773a33276790d668c473 - https://git.kernel.org/stable/c/573768dede0e2b7de38ecbc11cb3ee47643902dc - https://git.kernel.org/stable/c/a3ac79f38d354b10925824899cdbd2caadce55ba - https://git.kernel.org/stable/c/7c687a893f5cae5ca40d189635602e93af9bab73 - https://git.kernel.org/stable/c/e846bde09677fa3b203057846620b7ed96540f5f - https://git.kernel.org/stable/c/613b065ca32e90209024ec4a6bb5ca887ee70980
CVE ID: CVE-2022-49593 State: PUBLISHED Published: 2025-02-26T02:23:25.029Z Last Updated: 2025-10-01T19:36:53.395Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_interval. While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/80dabd089086e6553b7acfcff2ec223bdada87a1 - https://git.kernel.org/stable/c/b3798d3519eda9c409bb0815b0102f27ec42468d - https://git.kernel.org/stable/c/73a11588751a2c13f25d9da8117efc9a79b1843f - https:/
d3519eda9c409bb0815b0102f27ec42468d - https://git.kernel.org/stable/c/73a11588751a2c13f25d9da8117efc9a79b1843f - https://git.kernel.org/stable/c/c61aede097d350d890fa1edc9521b0072e14a0b8 - https://git.kernel.org/stable/c/e6b6f027e2854a51f345a5e3e808d7a88001d4f8 - https://git.kernel.org/stable/c/b14cc8afbbcbc6dce4797913c0b85266b897f541 - https://git.kernel.org/stable/c/2a85388f1d94a9f8b5a529118a2c5eaa0520d85c
CVE ID: CVE-2022-49594 State: PUBLISHED Published: 2025-02-26T02:23:25.531Z Last Updated: 2025-10-01T19:36:53.180Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. While reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/033963b220633ed1602d458e7e4ac06afa9fefb2 - https://git.kernel.org/stable/c/d5bece4df6090395f891110ef52a6f82d16685db - https://git.kernel.org/stable/c/cc36c37f5fe066c4708e623ead96dc8f57224bf5 - https
ece4df6090395f891110ef52a6f82d16685db - https://git.kernel.org/stable/c/cc36c37f5fe066c4708e623ead96dc8f57224bf5 - https://git.kernel.org/stable/c/e2ecbf3f0aa88277d43908c53b99399d55729ff9 - https://git.kernel.org/stable/c/8e92d4423615a5257d0d871fc067aa561f597deb
CVE ID: CVE-2022-49595 State: PUBLISHED Published: 2025-02-26T02:23:26.012Z Last Updated: 2025-10-01T19:36:52.992Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_probe_threshold. While reading sysctl_tcp_probe_threshold, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/9b5dc7ad6da1373d3c60d4b869d688f996e5d219 - https://git.kernel.org/stable/c/44768749980d53bc01980d9c060f736808d11af0 - https://git.kernel.org/stable/c/96900fa61777402eb5056269d8000aace33a8b6c - https
68749980d53bc01980d9c060f736808d11af0 - https://git.kernel.org/stable/c/96900fa61777402eb5056269d8000aace33a8b6c - https://git.kernel.org/stable/c/b04817c94fbd285a967d9b830b274fe9998c9c0b - https://git.kernel.org/stable/c/d452ce36f2d4c402fa3f5275c9677f80166e7fc6 - https://git.kernel.org/stable/c/f524c3e7f6cdad66b3b6a912cef47b656f8b0de3 - https://git.kernel.org/stable/c/fa5fb2cf9393db898772db8cb897ed5fd265eb78 - https://git.kernel.org/stable/c/92c0aa4175474483d6cf373314343d4e624e882a
CVE ID: CVE-2022-49596 State: PUBLISHED Published: 2025-02-26T02:23:26.521Z Last Updated: 2025-10-01T19:36:52.872Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_min_snd_mss. While reading sysctl_tcp_min_snd_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/fdb96b69f5909ffcdd6f1e0902219fc6d7689ff7 - https://git.kernel.org/stable/c/97992e8feff33b3ae154a113ec398546bbacda80 - https://git.kernel.org/stable/c/0fc9357282df055e30990b29f4b7afa53ab42cdb - https://git.k
33b3ae154a113ec398546bbacda80 - https://git.kernel.org/stable/c/0fc9357282df055e30990b29f4b7afa53ab42cdb - https://git.kernel.org/stable/c/0d8a39feb58910a7f7746b1770ee5578cc551fe6 - https://git.kernel.org/stable/c/78eb166cdefcc3221c8c7c1e2d514e91a2eb5014
CVE ID: CVE-2022-49597 State: PUBLISHED Published: 2025-02-26T02:23:26.989Z Last Updated: 2025-10-01T19:36:52.749Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_base_mss. While reading sysctl_tcp_base_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/30b73edc1d2459ba2c71cb58fbf84a1a6e640fbf - https://git.kernel.org/stable/c/514d2254c7b8aa2d257f5ffc79f0d96be2d6bfda - https://git.kernel.org/stable/c/4d7dea651b7fe0322be95054f64e3711afccc543 - https://git.kernel.
57f5ffc79f0d96be2d6bfda - https://git.kernel.org/stable/c/4d7dea651b7fe0322be95054f64e3711afccc543 - https://git.kernel.org/stable/c/9ca18116bc16ec31b9a3ce28ea1350badfa36128 - https://git.kernel.org/stable/c/88d78bc097cd8ebc6541e93316c9d9bf651b13e8
CVE ID: CVE-2022-49598 State: PUBLISHED Published: 2025-02-26T02:23:27.487Z Last Updated: 2025-10-01T19:36:52.609Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_mtu_probing. While reading sysctl_tcp_mtu_probing, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7e8fc428a7f680f1c4994a40e52d7f95a9a93038 - https://git.kernel.org/stable/c/f966773e13cdd3f12baa90071b7b660f6c633ccb - https://git.kernel.org/stable/c/77a04845f0d28a3561494a5f3121488470a968a4 - https://git.k
dd3f12baa90071b7b660f6c633ccb - https://git.kernel.org/stable/c/77a04845f0d28a3561494a5f3121488470a968a4 - https://git.kernel.org/stable/c/aabe9438fdfe004e021d5a206227ec105dbe2416 - https://git.kernel.org/stable/c/b0920ca09d9ce19980c8391b9002455baa9c1417 - https://git.kernel.org/stable/c/f47d00e077e7d61baf69e46dde3210c886360207
CVE ID: CVE-2022-49599 State: PUBLISHED Published: 2025-02-26T02:23:27.958Z Last Updated: 2025-10-01T19:36:52.489Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_l3mdev_accept. While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1d9c81833dec46ccb52a1d0db970fefb7c4fa071 - https://git.kernel.org/stable/c/9ba9cd43b5776c27d25e5a32dde9e80bdeb1c6a1 - https://git.kernel.org/stable/c/7d38d86b818104cf88961f3aebea34da89364a8e - https://g
3b5776c27d25e5a32dde9e80bdeb1c6a1 - https://git.kernel.org/stable/c/7d38d86b818104cf88961f3aebea34da89364a8e - https://git.kernel.org/stable/c/08a75f10679470552a3a443f9aefd1399604d31d
CVE ID: CVE-2022-49600 State: PUBLISHED Published: 2025-02-26T02:23:28.430Z Last Updated: 2025-10-01T19:36:52.354Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_ip_autobind_reuse. While reading sysctl_ip_autobind_reuse, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/611ba70e5aca252ef43374dda97ed4cf1c47a07c - https://git.kernel.org/stable/c/87ceaa199a72c5856d49a030941fabcd5c3928d4 - https://git.kernel.org/stable/c/fa7cdcf9b28d13aac1eeb34b948db8a18e041341 - https://gi
9a72c5856d49a030941fabcd5c3928d4 - https://git.kernel.org/stable/c/fa7cdcf9b28d13aac1eeb34b948db8a18e041341 - https://git.kernel.org/stable/c/0db232765887d9807df8bcb7b6f29b2871539eab
CVE ID: CVE-2022-49601 State: PUBLISHED Published: 2025-02-26T02:23:28.939Z Last Updated: 2025-10-01T19:36:52.231Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/13207f9485b5de68decf296ceb0046f5eabb2485 - https://git.kernel.org/stable/c/45fc82706a97242539d6b841ddd7a077ec20757b - https://git.kernel.org/stable/c/abf70de2ec026ae8d7da4e79bec61888a880e00b - http
fc82706a97242539d6b841ddd7a077ec20757b - https://git.kernel.org/stable/c/abf70de2ec026ae8d7da4e79bec61888a880e00b - https://git.kernel.org/stable/c/a7386602a2fe2f6192477e8ede291a815da09d81 - https://git.kernel.org/stable/c/d4f65615db7fca3df9f7e79eadf937e6ddb03c54 - https://git.kernel.org/stable/c/bf3134feffe61b7a0e21f60a04743f8da0958b53 - https://git.kernel.org/stable/c/526d8cf8824f613c72dba2155542295e70135f62 - https://git.kernel.org/stable/c/1a0008f9df59451d0a17806c1ee1a19857032fa8
CVE ID: CVE-2022-49602 State: PUBLISHED Published: 2025-02-26T02:23:29.420Z Last Updated: 2025-10-01T19:36:52.095Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/fc92e3b4bebfdd986ef1d2c5019f236837b0b982 - https://git.kernel.org/stable/c/5e7a1be3e68deef250ad43cc91f7bb8d7d758b48 - https://git.kernel.org/stable/c/9096edcf4854289f92252e086cf6e498c7f8c21d - https://git.kern
f250ad43cc91f7bb8d7d758b48 - https://git.kernel.org/stable/c/9096edcf4854289f92252e086cf6e498c7f8c21d - https://git.kernel.org/stable/c/25a635a67c830766110410fea88ec4e6ee29684b - https://git.kernel.org/stable/c/0ee76fe01ff3c0b4efaa500aecc90d7c8d3a8860 - https://git.kernel.org/stable/c/dccf8a67f30e18980d13f07006e5a536bbd1e136 - https://git.kernel.org/stable/c/a475ecc9ad919aa3ebdd4e4a6ee612b793bf74b3 - https://git.kernel.org/stable/c/85d0b4dbd74b95cc492b1f4e34497d3f894f5d9a
CVE ID: CVE-2022-49603 State: PUBLISHED Published: 2025-02-26T02:23:29.912Z Last Updated: 2025-10-01T19:36:51.971Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/11038fa781ab916535c53351537b22d6d405667d - https://git.kernel.org/stable/c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b - https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74 -
c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b - https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74 - https://git.kernel.org/stable/c/7bf9e18d9a5e99e3c83482973557e9f047b051e7
CVE ID: CVE-2022-49604 State: PUBLISHED Published: 2025-02-26T02:23:30.387Z Last Updated: 2025-10-01T19:36:51.845Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_use_pmtu. While reading sysctl_ip_fwd_use_pmtu, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/eb15262128b793e4b1d1c4514d3e6d19c3959764 - https://git.kernel.org/stable/c/7828309df0f89419a9349761a37c7d1b0da45697 - https://git.kernel.org/stable/c/b96ed5ccb09ae71103023ed13acefb194f609794 - https://git.ke
9419a9349761a37c7d1b0da45697 - https://git.kernel.org/stable/c/b96ed5ccb09ae71103023ed13acefb194f609794 - https://git.kernel.org/stable/c/93fbc06da1d819f3981a7bd7928c3641ea67b364 - https://git.kernel.org/stable/c/e364b5f6ffbfc457a997ad09a7baa16c19581edc - https://git.kernel.org/stable/c/60c158dc7b1f0558f6cadd5b50d0386da0000d50
CVE ID: CVE-2022-49605 State: PUBLISHED Published: 2025-02-26T02:23:30.873Z Last Updated: 2025-05-04T08:41:38.201Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGC_REMOVED logic and implement it properly The initially merged version of the igc driver code (via commit 146740f9abc4, "igc: Add support for PF") contained the following IGC_REMOVED checks in the igc_rd32/wr32() MMIO accessors: u32 igc_rd32(struct igc_hw *hw, u32 reg) { u8 __iomem *hw_addr = READ_ONCE(hw->hw_addr); u32 value = 0; if (IGC_REMOVED(hw_addr)) return ~value; value = readl(&hw_addr[reg]); /* reads should not return all F's */ if (!(~value)
(IGC_REMOVED(hw_addr)) return ~value; value = readl(&hw_addr[reg]); /* reads should not return all F's */ if (!(~value) && (!reg || !(~readl(hw_addr)))) hw->hw_addr = NULL; return value; } And: #define wr32(reg, val) \ do { \ u8 __iomem *hw_addr = READ_ONCE((hw)->hw_addr); \ if (!IGC_REMOVED(hw_addr)) \ writel((val), &hw_addr[(reg)]); \ } while (0) E.g. igb has similar checks in its MMIO accessors, and has a similar macro E1000_REMOVED, which is implemented as follows: #define E1000_REMOVED(h) unlikely(!(h)) These checks serve to detect and take note of an 0xffffffff MMIO read return from the device, which can be caused by a PCIe link flap or some other kind of PCI bus error, and to avoid pe
ead return from the device, which can be caused by a PCIe link flap or some other kind of PCI bus error, and to avoid performing MMIO reads and writes from that point onwards. However, the IGC_REMOVED macro was not originally implemented: #ifndef IGC_REMOVED #define IGC_REMOVED(a) (0) #endif /* IGC_REMOVED */ This led to the IGC_REMOVED logic to be removed entirely in a subsequent commit (commit 3c215fb18e70, "igc: remove IGC_REMOVED function"), with the rationale that such checks matter only for virtualization and that igc does not support virtualization -- but a PCIe device can become detached even without virtualization being in use, and without proper checks, a PCIe bus error affecting a
ce can become detached even without virtualization being in use, and without proper checks, a PCIe bus error affecting an igc adapter will lead to various NULL pointer dereferences, as the first access after the error will set hw->hw_addr to NULL, and subsequent accesses will blindly dereference this now-NULL pointer. This patch reinstates the IGC_REMOVED checks in igc_rd32/wr32(), and implements IGC_REMOVED the way it is done for igb, by checking for the unlikely() case of hw_addr being NULL. This change prevents the oopses seen when a PCIe link flap occurs on an igc adapter. References: - https://git.kernel.org/stable/c/16cb6717f4f42487ef10583eb8bc98e7d1e33d65 - https://git.kernel.org/stab
er. References: - https://git.kernel.org/stable/c/16cb6717f4f42487ef10583eb8bc98e7d1e33d65 - https://git.kernel.org/stable/c/77836dbe35382aaf8108489060c5c89530c77494 - https://git.kernel.org/stable/c/e75b73081f1ec169518773626c2ff3950476660b - https://git.kernel.org/stable/c/70965b6e5c03aa70cc754af1226b9f9cde0c4bf3 - https://git.kernel.org/stable/c/7c1ddcee5311f3315096217881d2dbe47cc683f9
CVE ID: CVE-2022-49606 State: PUBLISHED Published: 2025-02-26T02:23:31.346Z Last Updated: 2025-05-04T08:41:39.560Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qos_mutex to process RoCEv2 QP's on netdev events causes a kernel splat. Fix this by removing the handling for RoCEv2 in irdma_cm_teardown_connections that uses the mutex. This handling is only needed for iWARP to avoid having connections established while the link is down or having connections remain functional after the IP address is removed. BUG: sleeping function called from invalid context at kernel/locking
remain functional after the IP address is removed. BUG: sleeping function called from invalid context at kernel/locking/mutex. Call Trace: kernel: dump_stack+0x66/0x90 kernel: ___might_sleep.cold.92+0x8d/0x9a kernel: mutex_lock+0x1c/0x40 kernel: irdma_cm_teardown_connections+0x28e/0x4d0 [irdma] kernel: ? check_preempt_curr+0x7a/0x90 kernel: ? select_idle_sibling+0x22/0x3c0 kernel: ? select_task_rq_fair+0x94c/0xc90 kernel: ? irdma_exec_cqp_cmd+0xc27/0x17c0 [irdma] kernel: ? __wake_up_common+0x7a/0x190 kernel: irdma_if_notify+0x3cc/0x450 [irdma] kernel: ? sched_clock_cpu+0xc/0xb0 kernel: irdma_inet6addr_event+0xc6/0x150 [irdma] References: - https://git.kernel.org/stable/c/a4c5115140ed1833197
/0xb0 kernel: irdma_inet6addr_event+0xc6/0x150 [irdma] References: - https://git.kernel.org/stable/c/a4c5115140ed1833197bad9a6b80265840ff427f - https://git.kernel.org/stable/c/2cae7e519032e4b4672cb9204d5586a441924364 - https://git.kernel.org/stable/c/cc0315564d6eec91c716d314b743321be24c70b3
CVE ID: CVE-2022-49607 State: PUBLISHED Published: 2025-02-26T02:23:31.823Z Last Updated: 2025-10-01T19:36:51.711Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() Yang Jihing reported a race between perf_event_set_output() and perf_mmap_close(): CPU1 CPU2 perf_mmap_close(e2) if (atomic_dec_and_test(&e2->rb->mmap_count)) // 1 - > 0 detach_rest = true ioctl(e1, IOC_SET_OUTPUT, e2) perf_event_set_output(e1, e2) ... list_for_each_entry_rcu(e, &e2->rb->event_list, rb_entry) ring_buffer_attach(e, NULL); // e1 isn't yet added and // therefore not detached ri
cu(e, &e2->rb->event_list, rb_entry) ring_buffer_attach(e, NULL); // e1 isn't yet added and // therefore not detached ring_buffer_attach(e1, e2->rb) list_add_rcu(&e1->rb_entry, &e2->rb->event_list) After this; e1 is attached to an unmapped rb and a subsequent perf_mmap() will loop forever more: again: mutex_lock(&e->mmap_mutex); if (event->rb) { ... if (!atomic_inc_not_zero(&e->rb->mmap_count)) { ... mutex_unlock(&e->mmap_mutex); goto again; } } The loop in perf_mmap_close() holds e2->mmap_mutex, while the attach in perf_event_set_output() holds e1->mmap_mutex. As such there is no serialization to avoid this race. Change perf_event_set_output() to take both e1->mmap_mutex and e2->mmap_mutex
e is no serialization to avoid this race. Change perf_event_set_output() to take both e1->mmap_mutex and e2->mmap_mutex to alleviate that problem. Additionally, have the loop in perf_mmap() detach the rb directly, this avoids having to wait for the concurrent perf_mmap_close() to get around to doing it to make progress. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3bbd868099287ff9027db59029b502fcfa2202a0 - https://git.kernel.org/stable/c/f836f9ac95df15f1e0af4beb0ec20021e8c91998 - https://git.kernel.org/stable/c/17f5417194136517ee9bbd6511249e5310e5617c - https://git.kernel.org/stable/c/98c3c8fd0d4c560e0f8335b79c407bbf7fc9462c - https://git.k
36517ee9bbd6511249e5310e5617c - https://git.kernel.org/stable/c/98c3c8fd0d4c560e0f8335b79c407bbf7fc9462c - https://git.kernel.org/stable/c/43128b3eee337824158f34da6648163d2f2fb937 - https://git.kernel.org/stable/c/da3c256e2d0ebc87c7db0c605c9692b6f1722074 - https://git.kernel.org/stable/c/a9391ff7a7c5f113d6f2bf6621d49110950de49c - https://git.kernel.org/stable/c/68e3c69803dada336893640110cb87221bb01dcf
CVE ID: CVE-2022-49608 State: PUBLISHED Published: 2025-02-26T02:23:32.309Z Last Updated: 2025-10-01T19:36:51.576Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.". Additional Analyst Notes: - CISA A
says "Memory allocated with this function is automatically freed on driver detach.". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/13596e6c9e541e90e5fc2c52b23f08b951370da9 - https://git.kernel.org/stable/c/6194c021496addc11763d1ffa89ce5751889fe3c - https://git.kernel.org/stable/c/5694b162f275fb9a9f89422701b2b963be11e496 - https://git.kernel.org/stable/c/44016a85419ca0d4f1e4d0127b330f8e4e2a57d0 - https://git.kernel.org/stable/c/5595d30c4dc27d939635c3188c68203b6ece1711 - https://git.kernel.org/stable/c/c3b821e8e406d5650e587b7ac624ac24e9b780a8
CVE ID: CVE-2022-49609 State: PUBLISHED Published: 2025-02-26T02:23:32.818Z Last Updated: 2025-10-01T19:36:51.324Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b4d224eec96a18fa8959512cd9e5b6a50bd16a41 - https://git.kernel.org/stable/c/a9ed3ad3a8d1dfbc829d86edb3236873a315db
able/c/b4d224eec96a18fa8959512cd9e5b6a50bd16a41 - https://git.kernel.org/stable/c/a9ed3ad3a8d1dfbc829d86edb3236873a315db11 - https://git.kernel.org/stable/c/6689754b121bd487f99680280102b3a5cd7374af - https://git.kernel.org/stable/c/78bdf732cf5d74d1c6ecda06830a91f80a4aef6f - https://git.kernel.org/stable/c/493ceca3271316e74639c89ff8ac35883de64256 - https://git.kernel.org/stable/c/71ab83ac65e2d671552374123bf920c1d698335a - https://git.kernel.org/stable/c/49fa778ee044b00471dd9ccae5f6a121fffea1ac - https://git.kernel.org/stable/c/80192eff64eee9b3bc0594a47381937b94b9d65a