Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
dput+0xd4/0x300 [3310.968174] btrfs_sync_file+0x3f1/0x490 [3310.968180] __x64_sys_fsync+0x33/0x60 [3310.968185] do_syscall_64+0x3b/0x90 [3310.968190] entry_SYSCALL_64_after_hwframe+0x44/0xae [3310.968194] RIP: 0033:0x7efe6557329b [3310.968200] RSP: 002b:00007ffe0236ebc0 EFLAGS: 00000293 ORIG_RAX: 000000000000004a [3310.968203] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efe6557329b [3310.968204] RDX: 0000000000000000 RSI: 00007efe58d77010 RDI: 0000000000000006 [3310.968205] RBP: 0000000004000000 R08: 0000000000000000 R09: 00007efe58d77010 [3310.968207] R10: 0000000016cacc0c R11: 0000000000000293 R12: 00007efe5ce95980 [3310.968208] R13: 0000000000000000 R14: 00007efe6447c790 R15: 0
00016cacc0c R11: 0000000000000293 R12: 00007efe5ce95980 [3310.968208] R13: 0000000000000000 R14: 00007efe6447c790 R15: 0000000c80000000 [3310.968212] ---[ end trace 1a346f4d3c0d96ba ]--- [3310.968214] BTRFS: error (device sda) in cleanup_transaction:1946: errno=-11 unknown The abort occurs because of a write hole while writing out freeing tree nodes of a tree-log tree. For zoned btrfs, we re-dirty a freed tree node to ensure btrfs can write the region and does not leave a hole on write on a zoned device. The current code fails to re-dirty a node when the tree-log tree's depth is greater or equal to 2. That leads to a transaction abort with -EAGAIN. Fix the issue by properly re-dirtying a nod
th is greater or equal to 2. That leads to a transaction abort with -EAGAIN. Fix the issue by properly re-dirtying a node on walking up the tree. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/477675049ca803aa95ff77468ffbddd966b415b0 - https://git.kernel.org/stable/c/84c25448929942edacba905cecc0474e91114e7a
CVE ID: CVE-2021-47511 State: PUBLISHED Published: 2024-05-24T15:09:26.695Z Last Updated: 2025-05-04T07:12:35.159Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix negative period/buffer sizes The period size calculation in OSS layer may receive a negative value as an error, but the code there assumes only the positive values and handle them with size_t. Due to that, a too big value may be passed to the lower layers. This patch changes the code to handle with ssize_t and adds the proper error checks appropriately. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:/
checks appropriately. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/be8869d388593e57223ad39297c8e54be632f2f2 - https://git.kernel.org/stable/c/502e1146873d870f87da3b8f93d6bf2de5f38d0c - https://git.kernel.org/stable/c/8af815ab052eaf74addbbfb556d63ce2137c0e1b - https://git.kernel.org/stable/c/f96c0959c1ee92adc911c10d6ec209af50105049 - https://git.kernel.org/stable/c/f12c8a7515f641885677960af450082569a87243 - https://git.kernel.org/stable/c/02b2b691b77cd7b951fa7b6c9d44d4e472cdc823 - https://git.kernel.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc - https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f3869
l.org/stable/c/00a860678098fcd9fa8db2b5fb9d2ddf4776d4cc - https://git.kernel.org/stable/c/9d2479c960875ca1239bcb899f386970c13d9cfe
CVE ID: CVE-2021-47512 State: PUBLISHED Published: 2024-05-24T15:09:27.356Z Last Updated: 2025-05-04T07:12:36.210Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_pie: prevent dismantle issue For some reason, fq_pie_destroy() did not copy working code from pie_destroy() and other qdiscs, thus causing elusive bug. Before calling del_timer_sync(&q->adapt_timer), we need to ensure timer will not rearm itself. rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-....: (4416 ticks this GP) idle=60d/1/0x4000000000000000 softirq=10433/10434 fqs=2579 (t=10501 jiffies g=13085 q=3989) NMI backtrace for cpu 0 CPU: 0 PID:
/1/0x4000000000000000 softirq=10433/10434 fqs=2579 (t=10501 jiffies g=13085 q=3989) NMI backtrace for cpu 0 CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:627 [inline] check_cpu_stall kernel/rcu/t
x25e/0x3f0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:627 [inline] check_cpu_stall kernel/rcu/tree_stall.h:711 [inline] rcu_pending kernel/rcu/tree.c:3878 [inline] rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597 update_process_times+0x16d/0x200 kernel/time/timer.c:1785 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530
er.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:write_comp_data kernel/kcov.c:221 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x1d/0x80 kernel/kcov.c:273 Code: 54 c8 20 48 89 10 c3 66 0f 1f 44 00 00 53 41 89 fb 41 89 f1 bf 03 00 00 00 65 48 8b 0c 25 40 70 02 00 48 89 ce 4c 8b 54 24 08 <e8> 4e f7 ff ff 84 c0 74 51 48 8b 81 88 15 00 00 44 8b 81 84 15 00 RSP: 0018:ffffc90000d27b28 EFLAGS: 00000246 RAX: 0000000000
f7 ff ff 84 c0 74 51 48 8b 81 88 15 00 00 44 8b 81 84 15 00 RSP: 0018:ffffc90000d27b28 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888064bf1bf0 RCX: ffff888011928000 RDX: ffff888011928000 RSI: ffff888011928000 RDI: 0000000000000003 RBP: ffff888064bf1c28 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff875d8295 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880783dd300 R14: 0000000000000000 R15: 0000000000000000 pie_calculate_probability+0x405/0x7c0 net/sched/sch_pie.c:418 fq_pie_timer+0x170/0x2a0 net/sched/sch_fq_pie.c:383 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers.part.0+0x675/0xa20 kernel/time/timer.c:
l/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734 __run_timers kernel/time/timer.c:1715 [inline] run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 run_ksoftirqd kernel/softirq.c:921 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:913 smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK> Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2a51edaf5cc563574878b93d7ef3d5955dda7030 - https://git.kernel.o
Container: References: - https://git.kernel.org/stable/c/2a51edaf5cc563574878b93d7ef3d5955dda7030 - https://git.kernel.org/stable/c/d86216dfda7c98375f809e26a30bfdaaba21d46e - https://git.kernel.org/stable/c/61c2402665f1e10c5742033fce18392e369931d7
CVE ID: CVE-2021-47513 State: PUBLISHED Published: 2024-05-24T15:09:28.028Z Last Updated: 2025-05-04T12:41:37.078Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering Avoid a memory leak if there is not a CPU port defined. Addresses-Coverity-ID: 1492897 ("Resource leak") Addresses-Coverity-ID: 1492899 ("Resource leak") Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/973a0373e88cc19129bd6ef0ec193040535397d9 - https://git.kernel.org/stable/c/e8b1d7698038e76363859fb47ae0a262080646f5
CVE ID: CVE-2021-47514 State: PUBLISHED Published: 2024-05-24T15:09:28.686Z Last Updated: 2025-05-04T07:12:38.356Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: devlink: fix netns refcount leak in devlink_nl_cmd_reload() While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload() Some error paths forgot to release a refcount on a netns. To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4b7e90672af8e0c78205db
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4b7e90672af8e0c78205db006f1b0a20ebd07f5f - https://git.kernel.org/stable/c/fe30b70ca84da9c4aca85c03ad86e7a9b89c5ded - https://git.kernel.org/stable/c/4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186
CVE ID: CVE-2021-47515 State: PUBLISHED Published: 2024-05-24T15:09:29.334Z Last Updated: 2025-05-04T12:41:38.139Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the ip_rcv_core(...) sets the receiving interface index into the IPv4 socket control block (v5.16-rc4, net/ipv4/ip_input.c line 510): IPCB(skb)->iif = skb->skb_iif; If that IPv4 packet is meant to be encapsulated in an outer IPv6+SRH header, the seg6_do_srh_encap(...) performs the required encapsulation. In this case, the seg6_do_srh_encap function clears the IPv6 socket control block (
performs the required encapsulation. In this case, the seg6_do_srh_encap function clears the IPv6 socket control block (v5.16-rc4 net/ipv6/seg6_iptunnel.c line 163): memset(IP6CB(skb), 0, sizeof(*IP6CB(skb))); The memset(...) was introduced in commit ef489749aae5 ("ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation") a long time ago (2019-01-29). Since the IPv6 socket control block and the IPv4 socket control block share the same memory area (skb->cb), the receiving interface index info is lost (IP6CB(skb)->iif is set to zero). As a side effect, that condition triggers a NULL pointer dereference if commit 0857d6f8c759 ("ipv6: When forwarding count rx stats on the orig netdev") is applied
a NULL pointer dereference if commit 0857d6f8c759 ("ipv6: When forwarding count rx stats on the orig netdev") is applied. To fix that issue, we set the IP6CB(skb)->iif with the index of the receiving interface once again. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/b16d412e5f79734033df04e97d7ea2f50a8e9fe3 - https://git.kernel.org/stable/c/6431e71093f3da586a00c6d931481ffb0dc2db0e - https://git.kernel.org/stable/c/ef8804e47c0a44ae106ead1740408af5ea6c6ee9 - https://git.kernel.org/stable/c/666521b3852d2b2f52d570f9122b1e4b50d96831 - https://git.kernel.org/stable/c/98adb2bbfa407c9290bda299d4c6f7a1c4ebd5e1 - https://git.k
d2b2f52d570f9122b1e4b50d96831 - https://git.kernel.org/stable/c/98adb2bbfa407c9290bda299d4c6f7a1c4ebd5e1 - https://git.kernel.org/stable/c/ae68d93354e5bf5191ee673982251864ea24dd5c
CVE ID: CVE-2021-47516 State: PUBLISHED Published: 2024-05-24T15:09:30.022Z Last Updated: 2025-05-04T07:12:40.586Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nfp: Fix memory leak in nfp_cpp_area_cache_add() In line 800 (#1), nfp_cpp_area_alloc() allocates and initializes a CPP area structure. But in line 807 (#2), when the cache is allocated failed, this CPP area structure is not freed, which will result in memory leak. We can fix it by freeing the CPP area when the cache is allocated failed (#2). 792 int nfp_cpp_area_cache_add(struct nfp_cpp *cpp, size_t size) 793 { 794 struct nfp_cpp_area_cache *cache; 795 struct nfp_cpp_
nfp_cpp_area_cache_add(struct nfp_cpp *cpp, size_t size) 793 { 794 struct nfp_cpp_area_cache *cache; 795 struct nfp_cpp_area *area; 800 area = nfp_cpp_area_alloc(cpp, NFP_CPP_ID(7, NFP_CPP_ACTION_RW, 0), 801 0, size); // #1: allocates and initializes 802 if (!area) 803 return -ENOMEM; 805 cache = kzalloc(sizeof(*cache), GFP_KERNEL); 806 if (!cache) 807 return -ENOMEM; // #2: missing free 817 return 0; 818 } Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3e93abcdcec0436fbf0b6a88ae806902426895a2 - https://git.kernel.org/stable/c/eb51f639ef3fd5498b7def290ed8681b6aadd9a7 - https://git.kernel.org/stable/c/2e0e072e62fdaf781
s://git.kernel.org/stable/c/eb51f639ef3fd5498b7def290ed8681b6aadd9a7 - https://git.kernel.org/stable/c/2e0e072e62fdaf7816220af08e05c020f0fcb77a - https://git.kernel.org/stable/c/484069b5de9d223cc1c64c6f80389a99cfef51f1 - https://git.kernel.org/stable/c/f707820c09239d6f67699d9b2ff57863cc7905b0 - https://git.kernel.org/stable/c/c56c96303e9289cc34716b1179597b6f470833de
CVE ID: CVE-2021-47517 State: PUBLISHED Published: 2024-05-24T15:09:30.675Z Last Updated: 2025-05-04T07:12:41.633Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ethtool: do not perform operations on net devices being unregistered There is a short period between a net device starts to be unregistered and when it is actually gone. In that time frame ethtool operations could still be performed, which might end up in unwanted or undefined behaviours[1]. Do not allow ethtool operations after a net device starts its unregistration. This patch targets the netlink part as the ioctl one isn't affected: the reference to the net device i
s unregistration. This patch targets the netlink part as the ioctl one isn't affected: the reference to the net device is taken and the operation is executed within an rtnl lock section and the net device won't be found after unregister. [1] For example adding Tx queues after unregister ends up in NULL pointer exceptions and UaFs, such as: BUG: KASAN: use-after-free in kobject_get+0x14/0x90 Read of size 1 at addr ffff88801961248c by task ethtool/755 CPU: 0 PID: 755 Comm: ethtool Not tainted 5.15.0-rc6+ #778 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/014 Call Trace: dump_stack_lvl+0x57/0x72 print_address_description.constprop.0+0x1f/0x140 kasan_report.cold+0x
4.fc34 04/014 Call Trace: dump_stack_lvl+0x57/0x72 print_address_description.constprop.0+0x1f/0x140 kasan_report.cold+0x7f/0x11b kobject_get+0x14/0x90 kobject_add_internal+0x3d1/0x450 kobject_init_and_add+0xba/0xf0 netdev_queue_update_kobjects+0xcf/0x200 netif_set_real_num_tx_queues+0xb4/0x310 veth_set_channels+0x1c3/0x550 ethnl_set_channels+0x524/0x610 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/7c26da3be1e9843a15b5318f90db8a564479d2ac - https://git.kernel.org/stable/c/cfd719f04267108f5f5bf802b9d7de69e99a99f9 - https://git.kernel.org/stable/c/dde91ccfa25fd58f64c397d91b81a4b393100ffa
CVE ID: CVE-2021-47518 State: PUBLISHED Published: 2024-05-24T15:09:31.334Z Last Updated: 2025-05-04T07:12:43.077Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done The done() netlink callback nfc_genl_dump_ses_done() should check if received argument is non-NULL, because its allocation could fail earlier in dumpit() (nfc_genl_dump_ses()). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/87cdb8789c38e44ae5454aafe277997c950d00ed - https://git.kernel.org/stable/c/69bb79a8f5bb9f436b6f1434ca9742591b7
/stable/c/87cdb8789c38e44ae5454aafe277997c950d00ed - https://git.kernel.org/stable/c/69bb79a8f5bb9f436b6f1434ca9742591b7bbe18 - https://git.kernel.org/stable/c/811a7576747760bcaf60502f096d1e6e91d566fa - https://git.kernel.org/stable/c/3b861a40325eac9c4c13b6c53874ad90617e944d - https://git.kernel.org/stable/c/48fcd08fdbe05e35b650a252ec2a2d96057a1c7a - https://git.kernel.org/stable/c/83ea620a1be840bf05089a5061fb8323ca42f38c - https://git.kernel.org/stable/c/fae9705d281091254d4a81fa2da9d22346097dca - https://git.kernel.org/stable/c/4cd8371a234d051f9c9557fcbb1f8c523b1c0d10
CVE ID: CVE-2021-47519 State: PUBLISHED Published: 2024-05-24T15:09:33.118Z Last Updated: 2025-05-04T07:12:44.476Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_read_fifo: fix memory leak in error branch In m_can_read_fifo(), if the second call to m_can_fifo_read() fails, the function jump to the out_fail label and returns without calling m_can_receive_skb(). This means that the skb previously allocated by alloc_can_skb() is not freed. In other terms, this is a memory leak. This patch adds a goto label to destroy the skb if an error occurs. Issue was found with GCC -fanalyzer, please follow the link below for
goto label to destroy the skb if an error occurs. Issue was found with GCC -fanalyzer, please follow the link below for details. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908 - https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56
CVE ID: CVE-2021-47520 State: PUBLISHED Published: 2024-05-24T15:09:33.796Z Last Updated: 2025-05-04T07:12:45.630Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: pch_can: pch_can_rx_normal: fix use after free After calling netif_receive_skb(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is dereferenced just after the call netif_receive_skb(skb). Reordering the lines solves the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bafe343a885c70dddf358379cf0b2a1c07355d8d - https://git.kernel.org/stable/c/3a3c
ences: - https://git.kernel.org/stable/c/bafe343a885c70dddf358379cf0b2a1c07355d8d - https://git.kernel.org/stable/c/3a3c46e2eff0577454860a203be1a8295f4acb76 - https://git.kernel.org/stable/c/affbad02bf80380a7403885b9fe4a1587d1bb4f3 - https://git.kernel.org/stable/c/3e193ef4e0a3f5bf92ede83ef214cb09d01b00aa - https://git.kernel.org/stable/c/abb4eff3dcd2e583060082a18a8dbf31f02689d4 - https://git.kernel.org/stable/c/703dde112021c93d6e89443c070e7dbd4dea612e - https://git.kernel.org/stable/c/6c73fc931658d8cbc8a1714b326cb31eb71d16a7 - https://git.kernel.org/stable/c/94cddf1e9227a171b27292509d59691819c458db
CVE ID: CVE-2021-47521 State: PUBLISHED Published: 2024-05-24T15:09:34.457Z Last Updated: 2025-05-04T07:12:46.673Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: sja1000: fix use after free in ems_pcmcia_add_card() If the last channel is not available then "dev" is freed. Fortunately, we can just use "pdev->irq" instead. Also we should check if at least one channel was set up. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/cbd86110546f7f730a1f5d7de56c944a336c15c4 - https://git.kernel.org/stable/c/1dd5b819f7e406dc15bbc7670596ff25261aaa2a - https://gi
546f7f730a1f5d7de56c944a336c15c4 - https://git.kernel.org/stable/c/1dd5b819f7e406dc15bbc7670596ff25261aaa2a - https://git.kernel.org/stable/c/c8718026ba287168ff9ad0ccc4f9a413062cba36 - https://git.kernel.org/stable/c/ccf070183e4655824936c0f96c4a2bcca93419aa - https://git.kernel.org/stable/c/1a295fea90e1acbe80c6d4940f5ff856edcd6bec - https://git.kernel.org/stable/c/923f4dc5df679f678e121c20bf2fd70f7bf3e288 - https://git.kernel.org/stable/c/474f9a8534f5f89841240a7e978bafd6e1e039ce - https://git.kernel.org/stable/c/3ec6ca6b1a8e64389f0212b5a1b0f6fed1909e45
CVE ID: CVE-2021-47522 State: PUBLISHED Published: 2024-05-24T15:09:35.118Z Last Updated: 2025-05-04T07:12:47.710Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through uhid, there is a chance we don't have output reports and so report_field is null. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/8e0ceff632f48175ec7fb4706129c55ca8a7c7bd - https://git.kernel.org/stable/c/6272b17001e6fdcf7b4a16206287010a1523fa6e - https://git.kernel.org/stable/c/58f15f5ae7786c824868f3a7e093859b74669
table/c/6272b17001e6fdcf7b4a16206287010a1523fa6e - https://git.kernel.org/stable/c/58f15f5ae7786c824868f3a7e093859b74669ce7 - https://git.kernel.org/stable/c/918aa1ef104d286d16b9e7ef139a463ac7a296f0
CVE ID: CVE-2021-47523 State: PUBLISHED Published: 2024-05-24T15:09:36.045Z Last Updated: 2025-05-04T07:12:48.778Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr This buffer is currently allocated in hfi1_init(): if (reinit) ret = init_after_reset(dd); else ret = loadtime_init(dd); if (ret) goto done; /* allocate dummy tail memory for all receive contexts */ dd->rcvhdrtail_dummy_kvaddr = dma_alloc_coherent(&dd->pcidev->dev, sizeof(u64), &dd->rcvhdrtail_dummy_dma, GFP_KERNEL); if (!dd->rcvhdrtail_dummy_kvaddr) { dd_dev_err(dd, "cannot allocate dummy tail memory\n"); ret = -ENOMEM; got
P_KERNEL); if (!dd->rcvhdrtail_dummy_kvaddr) { dd_dev_err(dd, "cannot allocate dummy tail memory\n"); ret = -ENOMEM; goto done; } The reinit triggered path will overwrite the old allocation and leak it. Fix by moving the allocation to hfi1_alloc_devdata() and the deallocation to hfi1_free_devdata(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2c08271f4ed0e24633b3f81ceff61052b9d45efc - https://git.kernel.org/stable/c/834d0fb978643eaf09da425de197cc16a7c2761b - https://git.kernel.org/stable/c/60a8b5a1611b4a26de4839ab9c1fc2a9cf3e17c1
CVE ID: CVE-2021-47524 State: PUBLISHED Published: 2024-05-24T15:09:36.706Z Last Updated: 2025-05-04T07:12:49.966Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/888fc81107cacd2a4f681bac7bb785cef868214f - https://git.kernel.org/stable/c/dd5e90b16cca8a697cbe17b72e2a5f49291cabb2
CVE ID: CVE-2021-47525 State: PUBLISHED Published: 2024-05-24T15:09:37.355Z Last Updated: 2025-05-04T07:12:51.023Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix use-after-free and memleak on unbind Deregister the port when unbinding the driver to prevent it from being used after releasing the driver data and leaking memory allocated by serial core. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/602824cf9aa9db8830ffe5cfb2cd54365cada4fe - https://git.kernel.org/stable/c/05f929b395dec8957b636ff14e66b277ed022ed9