Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
fffff80000000 [ 107.333051] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2c86b24095fcf72cf51bc72d12e4350163b4e11d - https://git.kernel.org/stable/c/45a0de41ec383c8b7c6d442734ba3852dd2fc4a7 - https://git.kernel.org/stable/c/c6e316ac05532febb0c966fa9b55f5258ed037be
CVE ID: CVE-2023-52798 State: PUBLISHED Published: 2024-05-21T15:31:11.628Z Last Updated: 2025-05-04T07:43:24.166Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f882f5190
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f882f51905517575c9f793a3dff567af90ef9a10 - https://git.kernel.org/stable/c/426e718ce9ba60013364a54233feee309356cb82 - https://git.kernel.org/stable/c/ca420ac4f9451f22347bae44b18ab47ba2c267ec - https://git.kernel.org/stable/c/1fd878e1750190a612b5de2af357cca422ec0822 - https://git.kernel.org/stable/c/21ebb0aba580d347e12f01ce5f6e75044427b3d5 - https://git.kernel.org/stable/c/3b6c14833165f689cc5928574ebafe52bbce5f1e
CVE ID: CVE-2023-52799 State: PUBLISHED Published: 2024-05-21T15:31:12.351Z Last Updated: 2025-05-04T07:43:25.356Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
etermined and the required check can be applied. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/20f9310a18e3e99fc031e036fcbed67105ae1859 - https://git.kernel.org/stable/c/86df90f3fea7c5591f05c8a0010871d435e83046 - https://git.kernel.org/stable/c/ecfb47f13b08b02cf28b7b50d4941eefa21954d2 - https://git.kernel.org/stable/c/81aa58cd8495b8c3b527f58ccbe19478d8087f61 - https://git.kernel.org/stable/c/da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9 - https://git.kernel.org/stable/c/a50b796d36719757526ee094c703378895ab5e67 - https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514 - https://git.kernel.org/stable/c/87c6
ab5e67 - https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514 - https://git.kernel.org/stable/c/87c681ab49e99039ff2dd3e71852417381b13878 - https://git.kernel.org/stable/c/22cad8bc1d36547cdae0eef316c47d917ce3147c
CVE ID: CVE-2023-52800 State: PUBLISHED Published: 2024-05-21T15:31:13.033Z Last Updated: 2025-05-04T07:43:26.509Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/03ed26935bebf6b6fd8
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/03ed26935bebf6b6fd8a656490bf3dcc71b72679 - https://git.kernel.org/stable/c/3a51e6b4da71fdfa43ec006d6abc020f3e22d14e - https://git.kernel.org/stable/c/e3199b3fac65c9f103055390b6fd07c5cffa5961 - https://git.kernel.org/stable/c/423762f021825b5e57c3d6f01ff96a9ff19cdcd8 - https://git.kernel.org/stable/c/69cede2a5a5f60e3f5602b901b52cb64edd2ea6c - https://git.kernel.org/stable/c/3f77c7d605b29df277d77e9ee75d96e7ad145d2d
CVE ID: CVE-2023-52801 State: PUBLISHED Published: 2024-05-21T15:31:13.700Z Last Updated: 2025-10-01T19:19:30.119Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original iopt_area has filled a domain and is linked to domains_itree, pages_nodes have to be properly reinserted. Otherwise the domains_itree becomes corrupted and we will UAF. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/836db2e7e4565d8218923b3552304a1637e2f28d - https://git.kernel.org/stable/
References: - https://git.kernel.org/stable/c/836db2e7e4565d8218923b3552304a1637e2f28d - https://git.kernel.org/stable/c/fcb32111f01ddf3cbd04644cde1773428e31de6a - https://git.kernel.org/stable/c/e7250ab7ca4998fe026f2149805b03e09dc32498
CVE ID: CVE-2023-52802 State: REJECTED Published: 2024-05-21T15:31:14.377Z Last Updated: 2024-06-08T11:39:04.020Z Description: No description available.
CVE ID: CVE-2023-52803 State: PUBLISHED Published: 2024-05-21T15:31:15.063Z Last Updated: 2025-05-04T07:43:28.931Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC client pipefs dentries cleanup is in separated rpc_remove_pipedir() workqueue,which takes care about pipefs superblock locking. In some special scenarios, when kernel frees the pipefs sb of the current client and immediately alloctes a new pipefs sb, rpc_remove_pipedir function would misjudge the existence of pipefs sb which is not the one it used to hold. As a result, the rpc_remove_pipedir would clean th
udge the existence of pipefs sb which is not the one it used to hold. As a result, the rpc_remove_pipedir would clean the released freed pipefs dentries. To fix this issue, rpc_remove_pipedir should check whether the current pipefs sb is consistent with the original pipefs sb. This error can be catched by KASAN: ========================================================= [ 250.497700] BUG: KASAN: slab-use-after-free in dget_parent+0x195/0x200 [ 250.498315] Read of size 4 at addr ffff88800a2ab804 by task kworker/0:18/106503 [ 250.500549] Workqueue: events rpc_free_client_work [ 250.501001] Call Trace: [ 250.502880] kasan_report+0xb6/0xf0 [ 250.503209] ? dget_parent+0x195/0x200 [ 250.503561] dge
[ 250.501001] Call Trace: [ 250.502880] kasan_report+0xb6/0xf0 [ 250.503209] ? dget_parent+0x195/0x200 [ 250.503561] dget_parent+0x195/0x200 [ 250.503897] ? __pfx_rpc_clntdir_depopulate+0x10/0x10 [ 250.504384] rpc_rmdir_depopulate+0x1b/0x90 [ 250.504781] rpc_remove_client_dir+0xf5/0x150 [ 250.505195] rpc_free_client_work+0xe4/0x230 [ 250.505598] process_one_work+0x8ee/0x13b0 ... [ 22.039056] Allocated by task 244: [ 22.039390] kasan_save_stack+0x22/0x50 [ 22.039758] kasan_set_track+0x25/0x30 [ 22.040109] __kasan_slab_alloc+0x59/0x70 [ 22.040487] kmem_cache_alloc_lru+0xf0/0x240 [ 22.040889] __d_alloc+0x31/0x8e0 [ 22.041207] d_alloc+0x44/0x1f0 [ 22.041514] __rpc_lookup_create_exclusive+0x11c/0
240 [ 22.040889] __d_alloc+0x31/0x8e0 [ 22.041207] d_alloc+0x44/0x1f0 [ 22.041514] __rpc_lookup_create_exclusive+0x11c/0x140 [ 22.041987] rpc_mkdir_populate.constprop.0+0x5f/0x110 [ 22.042459] rpc_create_client_dir+0x34/0x150 [ 22.042874] rpc_setup_pipedir_sb+0x102/0x1c0 [ 22.043284] rpc_client_register+0x136/0x4e0 [ 22.043689] rpc_new_client+0x911/0x1020 [ 22.044057] rpc_create_xprt+0xcb/0x370 [ 22.044417] rpc_create+0x36b/0x6c0 ... [ 22.049524] Freed by task 0: [ 22.049803] kasan_save_stack+0x22/0x50 [ 22.050165] kasan_set_track+0x25/0x30 [ 22.050520] kasan_save_free_info+0x2b/0x50 [ 22.050921] __kasan_slab_free+0x10e/0x1a0 [ 22.051306] kmem_cache_free+0xa5/0x390 [ 22.051667] rcu_core+0x62
+0x2b/0x50 [ 22.050921] __kasan_slab_free+0x10e/0x1a0 [ 22.051306] kmem_cache_free+0xa5/0x390 [ 22.051667] rcu_core+0x62c/0x1930 [ 22.051995] __do_softirq+0x165/0x52a [ 22.052347] [ 22.052503] Last potentially related work creation: [ 22.052952] kasan_save_stack+0x22/0x50 [ 22.053313] __kasan_record_aux_stack+0x8e/0xa0 [ 22.053739] __call_rcu_common.constprop.0+0x6b/0x8b0 [ 22.054209] dentry_free+0xb2/0x140 [ 22.054540] __dentry_kill+0x3be/0x540 [ 22.054900] shrink_dentry_list+0x199/0x510 [ 22.055293] shrink_dcache_parent+0x190/0x240 [ 22.055703] do_one_tree+0x11/0x40 [ 22.056028] shrink_dcache_for_umount+0x61/0x140 [ 22.056461] generic_shutdown_super+0x70/0x590 [ 22.056879] kill_anon_super+
056028] shrink_dcache_for_umount+0x61/0x140 [ 22.056461] generic_shutdown_super+0x70/0x590 [ 22.056879] kill_anon_super+0x3a/0x60 [ 22.057234] rpc_kill_sb+0x121/0x200 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/17866066b8ac1cc38fb449670bc15dc9fee4b40a - https://git.kernel.org/stable/c/7d61d1da2ed1f682c41cae0c8d4719cdaccee5c5 - https://git.kernel.org/stable/c/dedf2a0eb9448ae73b270743e6ea9b108189df46 - https://git.kernel.org/stable/c/194454afa6aa9d6ed74f0c57127bc8beb27c20df - https://git.kernel.org/stable/c/7749fd2dbef72a52b5c9ffdbf877691950ed4680 - https://git.kernel.org/stable/c/1cdb52ffd6600a37bd355d8dce58ecd03e55
stable/c/7749fd2dbef72a52b5c9ffdbf877691950ed4680 - https://git.kernel.org/stable/c/1cdb52ffd6600a37bd355d8dce58ecd03e55e618 - https://git.kernel.org/stable/c/cc2e7ebbeb1d0601f7f3c8d93b78fcc03a95e44a - https://git.kernel.org/stable/c/bfca5fb4e97c46503ddfc582335917b0cc228264
CVE ID: CVE-2023-52804 State: PUBLISHED Published: 2024-05-21T15:31:15.720Z Last Updated: 2025-05-04T07:43:30.178Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for db_maxag and db_agpref Both db_maxag and db_agpref are used as the index of the db_agfree array, but there is currently no validity check for db_maxag and db_agpref, which can lead to errors. The following is related bug reported by Syzbot: UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:639:20 index 7936 is out of range for type 'atomic_t[128]' Add checking that the values of db_maxag and db_agpref are valid indexes for the db_agfr
range for type 'atomic_t[128]' Add checking that the values of db_maxag and db_agpref are valid indexes for the db_agfree array. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a0649e2dd4a3595b5595a29d0064d047c2fae2fb - https://git.kernel.org/stable/c/ce15b0f1a431168f07b1cc6c9f71206a2db5c809 - https://git.kernel.org/stable/c/32bd8f1cbcf8b663e29dd1f908ba3a129541a11b - https://git.kernel.org/stable/c/c6c8863fb3f57700ab583d875adda04caaf2278a - https://git.kernel.org/stable/c/1f74d336990f37703a8eee77153463d65b67f70e - https://git.kernel.org/stable/c/5013f8269887642cca784adc8db9b5f0b771533f - https://git.kernel.org/stable/
63d65b67f70e - https://git.kernel.org/stable/c/5013f8269887642cca784adc8db9b5f0b771533f - https://git.kernel.org/stable/c/dca403bb035a565bb98ecc1dda5d30f676feda40 - https://git.kernel.org/stable/c/2323de34a3ae61a9f9b544c18583f71cea86721f - https://git.kernel.org/stable/c/64933ab7b04881c6c18b21ff206c12278341c72e
CVE ID: CVE-2023-52805 State: PUBLISHED Published: 2024-05-21T15:31:16.374Z Last Updated: 2025-10-01T19:18:52.937Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9 - https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083 - https://git.kernel.org/stable/c/746
4bb64e9 - https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083 - https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c - https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1 - https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641 - https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d - https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777 - https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8 - https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483
CVE ID: CVE-2023-52806 State: PUBLISHED Published: 2024-05-21T15:31:17.025Z Last Updated: 2025-05-04T07:43:32.461Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7de25112de8222fd20564769e6c99dc9f
gram Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7de25112de8222fd20564769e6c99dc9f9738a0b - https://git.kernel.org/stable/c/758c7733cb821041f5fd403b7b97c0b95d319323 - https://git.kernel.org/stable/c/2527775616f3638f4fd54649eba8c7b84d5e4250 - https://git.kernel.org/stable/c/25354bae4fc310c3928e8a42fda2d486f67745d7 - https://git.kernel.org/stable/c/631a96e9eb4228ff75fce7e72d133ca81194797e - https://git.kernel.org/stable/c/43b91df291c8802268ab3cfd8fccfdf135800ed4 - https://git.kernel.org/stable/c/fe7c1a0c2b25c82807cb46fc3aadbf2664a682b0 - https://git.kernel.org/stable/c/4a320da7f7cbdab2098b103c47f45d5061f42edd - https://git.kernel.org/stable/c/f93dc90c2e8ed
https://git.kernel.org/stable/c/4a320da7f7cbdab2098b103c47f45d5061f42edd - https://git.kernel.org/stable/c/f93dc90c2e8ed664985e366aa6459ac83cdab236
CVE ID: CVE-2023-52807 State: PUBLISHED Published: 2024-05-21T15:31:17.686Z Last Updated: 2025-05-04T07:43:33.747Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09 - https
- CVE Program Container: References: - https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09 - https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792 - https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4 - https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3
CVE ID: CVE-2023-52808 State: PUBLISHED Published: 2024-05-21T15:31:18.330Z Last Updated: 2025-05-04T07:43:34.814Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs If init debugfs failed during device registration due to memory allocation failure, debugfs_remove_recursive() is called, after which debugfs_dir is not set to NULL. debugfs_remove_recursive() will be called again during device removal. As a result, illegal pointer is accessed. [ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs! ... [ 1669.836708] Unable to handle kernel NULL pointer
665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs! ... [ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 1669.872669] pc : down_write+0x24/0x70 [ 1669.876315] lr : down_write+0x1c/0x70 [ 1669.879961] sp : ffff000036f53a30 [ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8 [ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000 [ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270 [ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8 [ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310 [ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10 [ 1669.914982] x17: 0000000000000000 x16: 0000000000000000
10 [ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10 [ 1669.914982] x17: 0000000000000000 x16: 0000000000000000 [ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870 [ 1669.925555] x13: 0000000000000040 x12: 0000000000000228 [ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0 [ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10 [ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff [ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00 [ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000 [ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001 [ 1669.962563] Call trace: [ 1669.965000] down_write+0x24/0x70 [ 1669.968301] debugfs_remove_recursive+0x5c
ffff00000001 [ 1669.962563] Call trace: [ 1669.965000] down_write+0x24/0x70 [ 1669.968301] debugfs_remove_recursive+0x5c/0x1b0 [ 1669.972905] hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main] [ 1669.978541] hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw] [ 1669.984175] pci_device_remove+0x48/0xd8 [ 1669.988082] device_release_driver_internal+0x1b4/0x250 [ 1669.993282] device_release_driver+0x28/0x38 [ 1669.997534] pci_stop_bus_device+0x84/0xb8 [ 1670.001611] pci_stop_and_remove_bus_device_locked+0x24/0x40 [ 1670.007244] remove_store+0xfc/0x140 [ 1670.010802] dev_attr_store+0x44/0x60 [ 1670.014448] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x
44/0x60 [ 1670.014448] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x60/0x190 [ 1670.025472] vfs_write+0xac/0x1c0 [ 1670.028771] ksys_write+0x6c/0xd8 [ 1670.032071] __arm64_sys_write+0x24/0x30 [ 1670.035977] el0_svc_common+0x78/0x130 [ 1670.039710] el0_svc_handler+0x38/0x78 [ 1670.043442] el0_svc+0x8/0xc To fix this, set debugfs_dir to NULL after debugfs_remove_recursive(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f0bfc8a5561fb0b2c48183dcbfe00bdd6d973bd3 - https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec - https://git.kernel.org/stable/c/
dd6d973bd3 - https://git.kernel.org/stable/c/33331b265aac9441ac0c1a5442e3f05d038240ec - https://git.kernel.org/stable/c/75a2656260fe8c7eeabda6ff4600b29e183f48db - https://git.kernel.org/stable/c/b4465009e7d60c6111946db4c8f1e50d401ed7be - https://git.kernel.org/stable/c/6de426f9276c448e2db7238911c97fb157cb23be
CVE ID: CVE-2023-52809 State: PUBLISHED Published: 2024-05-21T15:31:18.982Z Last Updated: 2025-05-04T07:43:35.849Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() fc_lport_ptp_setup() did not check the return value of fc_rport_create() which can return NULL and would cause a NULL pointer dereference. Address this issue by checking return value of fc_rport_create() and log error message on fc_rport_create() failed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/930f0aaba4820d6362de
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/930f0aaba4820d6362de4e6ed569eaf444f1ea4e - https://git.kernel.org/stable/c/77072ec41d6ab3718c3fc639bc149b8037caedfa - https://git.kernel.org/stable/c/b549acf999824d4f751ca57965700372f2f3ad00 - https://git.kernel.org/stable/c/bb83f79f90e92f46466adcfd4fd264a7ae0f0f01 - https://git.kernel.org/stable/c/56d78b5495ebecbb9395101f3be177cd0a52450b - https://git.kernel.org/stable/c/442fd24d7b6b29e4a9cd9225afba4142d5f522ba - https://git.kernel.org/stable/c/f6fe7261b92b21109678747f36df9fdab1e30c34 - https://git.kernel.org/stable/c/6b9ecf4e1032e645873933e5b43cbb84cac19106 - https://git.kernel.org/stable/c/
dab1e30c34 - https://git.kernel.org/stable/c/6b9ecf4e1032e645873933e5b43cbb84cac19106 - https://git.kernel.org/stable/c/4df105f0ce9f6f30cda4e99f577150d23f0c9c5f
CVE ID: CVE-2023-52810 State: PUBLISHED Published: 2024-05-21T15:31:19.629Z Last Updated: 2025-05-04T07:43:36.926Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative. In the case of l2nbperpage being negative, an error will occur when subsequently used as shift exponent. Syzbot reported this bug: UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12 shift exponent -16777216 is negative Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.k
7216 is negative Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cc61fcf7d1c99f148fe8ddfb5c6ed0bb75861f01 - https://git.kernel.org/stable/c/8f2964df6bfce9d92d81ca552010b8677af8d9dc - https://git.kernel.org/stable/c/a81a56b4cbe3142cc99f6b98e8f9b3a631c768e1 - https://git.kernel.org/stable/c/524b4f203afcf87accfe387e846f33f916f0c907 - https://git.kernel.org/stable/c/5f148b16972e5f4592629b244d5109b15135f53f - https://git.kernel.org/stable/c/0cb567e727339a192f9fd0db00781d73a91d15a6 - https://git.kernel.org/stable/c/491085258185ffc4fb91555b0dba895fe7656a45 - https://git.kernel.org/stable/c/1a7c53fdea1d189087544d9a606d249e93c4
stable/c/491085258185ffc4fb91555b0dba895fe7656a45 - https://git.kernel.org/stable/c/1a7c53fdea1d189087544d9a606d249e93c4934b - https://git.kernel.org/stable/c/525b861a008143048535011f3816d407940f4bfa
CVE ID: CVE-2023-52811 State: PUBLISHED Published: 2024-05-21T15:31:20.282Z Last Updated: 2025-05-04T07:43:38.190Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In practice the driver should never send more commands than are allocated to a queue's event pool. In the unlikely event that this happens, the code asserts a BUG_ON, and in the case that the kernel is not configured to crash on panic returns a junk event pointer from the empty event list causing things to spiral from there. This BUG_ON is a historical artifact of the ibmvfc driver first being upstreamed, a
causing things to spiral from there. This BUG_ON is a historical artifact of the ibmvfc driver first being upstreamed, and it is well known now that the use of BUG_ON is bad practice except in the most unrecoverable scenario. There is nothing about this scenario that prevents the driver from recovering and carrying on. Remove the BUG_ON in question from ibmvfc_get_event() and return a NULL pointer in the case of an empty event pool. Update all call sites to ibmvfc_get_event() to check for a NULL pointer and perfrom the appropriate failure or recovery action. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e1d1f79b1929d