Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to make sure any currently running deferred probe work or asynchronous probe finishes, that wasn't sufficient to account for devices being deferred until deferred_probe_timeout. Commit 35a672363ab3 ("driver core: Ensure wait_for_device_probe() waits until the deferred_probe_timeout fires") tried to fix that by making sure wait_for_device_probe() waits for deferred_probe_timeout to expire before returning. However, if wait_for_device_probe() is called from the kernel_init() context: - Before deferred_probe_initcall() [2], it causes the boot process to hang due to a deadlock. - After deferred_probe_initcall() [3], it blocks kernel_init() from continuing till deferred_probe_timeout expires and
- After deferred_probe_initcall() [3], it blocks kernel_init() from continuing till deferred_probe_timeout expires and beats the point of deferred_probe_timeout that's trying to wait for userspace to load modules. Neither of this is good. So revert the changes to wait_for_device_probe(). [1] - https://lore.kernel.org/lkml/TYAPR01MB45443DF63B9EF29054F7C41FD8C60@TYAPR01MB4544.jpnprd01.prod.outlook.com/ [2] - https://lore.kernel.org/lkml/YowHNo4sBjr9ijZr@dev-arch.thelio-3990X/ [3] - https://lore.kernel.org/lkml/Yo3WvGnNk3LvLb7R@linutronix.de/ References: - https://git.kernel.org/stable/c/71cbce75031aed26c72c2dc8a83111d181685f1b - https://git.kernel.org/stable/c/29357883a89193863f3cc6a2c5e0b42c
org/stable/c/71cbce75031aed26c72c2dc8a83111d181685f1b - https://git.kernel.org/stable/c/29357883a89193863f3cc6a2c5e0b42ceb022761 - https://git.kernel.org/stable/c/528229474e1cbb1b3451cb713d94aecb5f6ee264 - https://git.kernel.org/stable/c/4ad6af07efcca85369c21e4897b3020cff2c170b - https://git.kernel.org/stable/c/5ee76c256e928455212ab759c51d198fedbe7523
CVE ID: CVE-2022-49380 State: PUBLISHED Published: 2025-02-26T02:11:18.314Z Last Updated: 2025-07-11T17:19:20.222Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() As Yanming reported in bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=215897 I have encountered a bug in F2FS file system in kernel v5.17. The kernel should enable CONFIG_KASAN=y and CONFIG_KASAN_INLINE=y. You can reproduce the bug by running the following commands: The kernel message is shown below: kernel BUG at fs/f2fs/f2fs.h:2511! Call Trace: f2fs_remove_inode_page+0x2a2/0x830 f2fs_evict_inode+0x9b7/
s shown below: kernel BUG at fs/f2fs/f2fs.h:2511! Call Trace: f2fs_remove_inode_page+0x2a2/0x830 f2fs_evict_inode+0x9b7/0x1510 evict+0x282/0x4e0 do_unlinkat+0x33a/0x540 __x64_sys_unlinkat+0x8e/0xd0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae The root cause is: .total_valid_block_count or .total_valid_node_count could fuzzed to zero, then once dec_valid_node_count() was called, it will cause BUG_ON(), this patch fixes to print warning info and set SBI_NEED_FSCK into CP instead of panic. References: - https://git.kernel.org/stable/c/f8b3c3fcf33105bc1ee7788e3b51b0a1ae42ae53 - https://git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a - https://git.kernel.org/s
8e3b51b0a1ae42ae53 - https://git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a - https://git.kernel.org/stable/c/bce859358d3d5940aa858e40ceee70ee6e76130e - https://git.kernel.org/stable/c/89d9a48d0cd30429463ea4e37ca83be6773ed5eb - https://git.kernel.org/stable/c/ccffa99ae6a1f44797b57444c6a80382a42928fe - https://git.kernel.org/stable/c/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e
CVE ID: CVE-2022-49381 State: PUBLISHED Published: 2025-02-26T02:11:18.812Z Last Updated: 2025-10-01T19:46:52.106Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2_do_fill_super If jffs2_iget() or d_make_root() in jffs2_do_fill_super() returns an error, we can observe the following kmemleak report: -------------------------------------------- unreferenced object 0xffff888105a65340 (size 64): comm "mount", pid 710, jiffies 4302851558 (age 58.239s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ..............
0 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff859c45e5>] kmem_cache_alloc_trace+0x475/0x8a0 [<ffffffff86160146>] jffs2_sum_init+0x96/0x1a0 [<ffffffff86140e25>] jffs2_do_mount_fs+0x745/0x2120 [<ffffffff86149fec>] jffs2_do_fill_super+0x35c/0x810 [<ffffffff8614aae9>] jffs2_fill_super+0x2b9/0x3b0 [...] unreferenced object 0xffff8881bd7f0000 (size 65536): comm "mount", pid 710, jiffies 4302851558 (age 58.239s) hex dump (first 32 bytes): bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ backtrace: [<ffffffff858579ba>] kmal
b ................ bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................ backtrace: [<ffffffff858579ba>] kmalloc_order+0xda/0x110 [<ffffffff85857a11>] kmalloc_order_trace+0x21/0x130 [<ffffffff859c2ed1>] __kmalloc+0x711/0x8a0 [<ffffffff86160189>] jffs2_sum_init+0xd9/0x1a0 [<ffffffff86140e25>] jffs2_do_mount_fs+0x745/0x2120 [<ffffffff86149fec>] jffs2_do_fill_super+0x35c/0x810 [<ffffffff8614aae9>] jffs2_fill_super+0x2b9/0x3b0 [...] -------------------------------------------- This is because the resources allocated in jffs2_sum_init() are not released. Call jffs2_sum_exit() to release these resources to solve the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
m_exit() to release these resources to solve the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4ba7bbeab8009faf3a726e565d98816593ddd5b0 - https://git.kernel.org/stable/c/4da8763a3d2b684c773b72ed80fad40bc264bc40 - https://git.kernel.org/stable/c/28048a4cf3813b7cf5cc8cce629dfdc7951cb1c2 - https://git.kernel.org/stable/c/d3a4fff1e7e408c32649030daa7c2c42a7e19a95 - https://git.kernel.org/stable/c/3252d327f977b14663a10967f3b0930d6c325687 - https://git.kernel.org/stable/c/ecc53e58596542791e82eff00702f8af7a313f70 - https://git.kernel.org/stable/c/cf9db013e167bc8fc2ecd7a13ed97a37df0c9dab - https://git.kernel.org/stable/c/69295267c481545f636b
/git.kernel.org/stable/c/cf9db013e167bc8fc2ecd7a13ed97a37df0c9dab - https://git.kernel.org/stable/c/69295267c481545f636b69ff341b8db75aa136b9 - https://git.kernel.org/stable/c/c14adb1cf70a984ed081c67e9d27bc3caad9537c
CVE ID: CVE-2022-49382 State: PUBLISHED Published: 2025-02-26T02:11:19.294Z Last Updated: 2025-10-01T19:46:51.971Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: soc: rockchip: Fix refcount leak in rockchip_grf_init of_find_matching_node_and_match returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d5422f323858cad3ac3581075f9a3a5e0d41c0d8 - https://git.kernel.org/stable/c/28133325526b92921f3269fdf97a20d90b92b217 - https://git.kernel.org/stab
f9a3a5e0d41c0d8 - https://git.kernel.org/stable/c/28133325526b92921f3269fdf97a20d90b92b217 - https://git.kernel.org/stable/c/69a30b2ed620c2206cbbd1e9c112e4fc584e02bd - https://git.kernel.org/stable/c/5b3e990f85eb034faa461e691e719e8ce9e2a3c8 - https://git.kernel.org/stable/c/aab25b669cb9fd3698c2631be4435f4fe92d9e59 - https://git.kernel.org/stable/c/042571fe1d171773655ad706715ecc865913d9a4 - https://git.kernel.org/stable/c/8f64e84924604bb969ee1fbc4b8d7d09b9214889 - https://git.kernel.org/stable/c/9b59588d8be91c96bfb0371e912ceb4f16315dbf
CVE ID: CVE-2022-49383 State: PUBLISHED Published: 2025-02-26T02:11:19.768Z Last Updated: 2025-05-04T08:36:30.704Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context' This patch fixes the issue 'BUG: Invalid wait context' during restart() callback by using clk_prepare_enable() instead of pm_runtime_get_sync() for turning on the clocks during restart. This issue is noticed when testing with renesas_defconfig. [ 42.213802] reboot: Restarting system [ 42.217860] [ 42.219364] ============================= [ 42.223368] [ BUG: Invalid wait context ] [ 42.227372] 5.17.0-rc5-arm64-renesas
2.219364] ============================= [ 42.223368] [ BUG: Invalid wait context ] [ 42.227372] 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522 Not tainted [ 42.234153] ----------------------------- [ 42.238155] systemd-shutdow/1 is trying to lock: [ 42.242766] ffff00000a650828 (&genpd->mlock){+.+.}-{3:3}, at: genpd_lock_mtx+0x14/0x20 [ 42.250709] other info that might help us debug this: [ 42.255753] context-{4:4} [ 42.258368] 2 locks held by systemd-shutdow/1: [ 42.262806] #0: ffff80000944e1c8 (system_transition_mutex#2){+.+.}-{3:3}, at: __do_sys_reboot+0xd0/0x250 [ 42.272388] #1: ffff8000094c4e40 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x0/0x150 [ 42.281795] stack ba
272388] #1: ffff8000094c4e40 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x0/0x150 [ 42.281795] stack backtrace: [ 42.284672] CPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.17.0-rc5-arm64-renesas-00002-g10393723e35e #522 [ 42.294577] Hardware name: Renesas SMARC EVK based on r9a07g044c2 (DT) [ 42.301096] Call trace: [ 42.303538] dump_backtrace+0xcc/0xd8 [ 42.307203] show_stack+0x14/0x30 [ 42.310517] dump_stack_lvl+0x88/0xb0 [ 42.314180] dump_stack+0x14/0x2c [ 42.317492] __lock_acquire+0x1b24/0x1b50 [ 42.321502] lock_acquire+0x120/0x3a8 [ 42.325162] __mutex_lock+0x84/0x8f8 [ 42.328737] mutex_lock_nested+0x30/0x58 [ 42.332658] genpd_lock_mtx+0x14/0x20 [ 42.336319] genpd_runt
x_lock+0x84/0x8f8 [ 42.328737] mutex_lock_nested+0x30/0x58 [ 42.332658] genpd_lock_mtx+0x14/0x20 [ 42.336319] genpd_runtime_resume+0xc4/0x228 [ 42.340587] __rpm_callback+0x44/0x170 [ 42.344337] rpm_callback+0x64/0x70 [ 42.347824] rpm_resume+0x4e0/0x6b8 [ 42.351310] __pm_runtime_resume+0x50/0x78 [ 42.355404] rzg2l_wdt_restart+0x28/0x68 [ 42.359329] watchdog_restart_notifier+0x1c/0x30 [ 42.363943] atomic_notifier_call_chain+0x94/0x150 [ 42.368732] do_kernel_restart+0x24/0x30 [ 42.372652] machine_restart+0x44/0x70 [ 42.376399] kernel_restart+0x3c/0x60 [ 42.380058] __do_sys_reboot+0x228/0x250 [ 42.383977] __arm64_sys_reboot+0x20/0x28 [ 42.387983] invoke_syscall+0x40/0xf8 References: - https://gi
oot+0x228/0x250 [ 42.383977] __arm64_sys_reboot+0x20/0x28 [ 42.387983] invoke_syscall+0x40/0xf8 References: - https://git.kernel.org/stable/c/6505541e5298cea2b79da68ee626f583f8e18784 - https://git.kernel.org/stable/c/0a635239cd5484d8f2e702713ccc49ec82aa7594 - https://git.kernel.org/stable/c/e4cf89596c1f1e33309556699f910ced4abbaf44
CVE ID: CVE-2022-49384 State: PUBLISHED Published: 2025-02-26T02:11:20.246Z Last Updated: 2025-10-01T19:46:51.835Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: md: fix double free of io_acct_set bioset Now io_acct_set is alloc and free in personality. Remove the codes that free io_acct_set in md_free and md_stop. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/36a2fc44c574a59ee3b5e2cb327182f227b2b07e - https://git.kernel.org/stable/c/f99d5b5dc8a42c807b5f1176b925aa45d61962ab - https://git.kernel.org/stable/c/ea7d7bd90079d96f9c86bdaf0b106e0cd2a70661 - https://git.kernel.org/stabl
25aa45d61962ab - https://git.kernel.org/stable/c/ea7d7bd90079d96f9c86bdaf0b106e0cd2a70661 - https://git.kernel.org/stable/c/42b805af102471f53e3c7867b8c2b502ea4eef7e
CVE ID: CVE-2022-49385 State: PUBLISHED Published: 2025-02-26T02:11:20.725Z Last Updated: 2025-05-04T08:36:33.613Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driver_attach failed When driver_attach(drv); failed, the driver_private will be freed. But it has been added to the bus, which caused a UAF. To fix it, we need to delete it from the bus when failed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5d709f58c743166fe1c6914b9de0ae8868600d9b - https://git.kernel.org/stable/c/823f24f2e329babd0330200d0b74882516fe57f4 - https://git.kernel.org/stable/c
e8868600d9b - https://git.kernel.org/stable/c/823f24f2e329babd0330200d0b74882516fe57f4 - https://git.kernel.org/stable/c/cdf1a683a01583bca4b618dd16223cbd6e462e21 - https://git.kernel.org/stable/c/5389101257828d1913d713d9a40acbe14f5961df - https://git.kernel.org/stable/c/c059665c84feab46b7173d3a1bf36c2fb7f9df86 - https://git.kernel.org/stable/c/310862e574001a97ad02272bac0fd13f75f42a27
CVE ID: CVE-2022-49386 State: PUBLISHED Published: 2025-02-26T02:11:21.197Z Last Updated: 2025-10-01T19:46:51.701Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. am65_cpsw_init_cpts() and am65_cpsw_nuss_probe() don't release the refcount in error case. Add missing of_node_put() to avoid refcount leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f7ba2cc57f404d2d9f26fb85bd3833d35a477829 - htt
s: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f7ba2cc57f404d2d9f26fb85bd3833d35a477829 - https://git.kernel.org/stable/c/a4b7ef3b159805ba6be061d0cd2403d84b9b0063 - https://git.kernel.org/stable/c/78aca10a16f001c9f49f1cc4dadfee8d444bb173 - https://git.kernel.org/stable/c/2e44f21c384503562713b7d3b673c40bed20af3d - https://git.kernel.org/stable/c/5dd89d2fc438457811cbbec07999ce0d80051ff5
CVE ID: CVE-2022-49387 State: PUBLISHED Published: 2025-02-26T02:11:21.804Z Last Updated: 2025-10-01T19:46:51.569Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: watchdog: rzg2l_wdt: Fix 32bit overflow issue The value of timer_cycle_us can be 0 due to 32bit overflow. For eg:- If we assign the counter value "0xfff" for computing maxval. This patch fixes this issue by appending ULL to 1024, so that it is promoted to 64bit. This patch also fixes the warning message, 'watchdog: Invalid min and max timeout values, resetting to 0!'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e07b9
resetting to 0!'. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e07b9fa0dc32b492de85528caaf9f0c605d8424f - https://git.kernel.org/stable/c/b95a47667d34e76c2c9013f8e3b1e5039a5a0b76 - https://git.kernel.org/stable/c/ea2949df22a533cdf75e4583c00b1ce94cd5a83b
CVE ID: CVE-2022-49388 State: PUBLISHED Published: 2025-02-26T02:11:22.326Z Last Updated: 2025-05-04T08:36:37.085Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_create_volume: Fix use-after-free when volume creation failed There is an use-after-free problem for 'eba_tbl' in ubi_create_volume()'s error handling path: ubi_eba_replace_table(vol, eba_tbl) vol->eba_tbl = tbl out_mapping: ubi_eba_destroy_table(eba_tbl) // Free 'eba_tbl' out_unlock: put_device(&vol->dev) vol_release kfree(tbl->entries) // UAF Fix it by removing redundant 'eba_tbl' releasing. Fetch a reproducer in [Link]. Additional Analyst Notes: - CISA ADP
AF Fix it by removing redundant 'eba_tbl' releasing. Fetch a reproducer in [Link]. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/25ff1e3a1351c0d936dd1ac2f9e58231ea1510c9 - https://git.kernel.org/stable/c/abb67043060f2bf4c03d7c3debb9ae980e2b6db3 - https://git.kernel.org/stable/c/8302620aeb940f386817321d272b12411ae7d39f - https://git.kernel.org/stable/c/6d8d3f68cbecfd31925796f0fb668eb21ab06734 - https://git.kernel.org/stable/c/5ff2514e4fb55dcf3d88294686040ca73ea0c1a2 - https://git.kernel.org/stable/c/e27ecf325e51abd06aaefba57a6322a46fa4178b - https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217 - https://git.kernel.org/stab
a6322a46fa4178b - https://git.kernel.org/stable/c/1174ab8ba36a48025b68b5ff1085000b1e510217 - https://git.kernel.org/stable/c/8c03a1c21d72210f81cb369cc528e3fde4b45411
CVE ID: CVE-2022-49389 State: PUBLISHED Published: 2025-02-26T02:11:22.834Z Last Updated: 2025-10-01T19:46:51.414Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stub_probe() usb_get_dev() is called in stub_device_alloc(). When stub_probe() fails after that, usb_put_dev() needs to be called to release the reference. Fix this by moving usb_put_dev() to sdev_free error path handling. Find this by code review. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6bafee2f18af5e5ac125e42960bc65496d0e56a0 - https://git.kernel.org/stable/c/f20d2d3b3364ce652
s://git.kernel.org/stable/c/6bafee2f18af5e5ac125e42960bc65496d0e56a0 - https://git.kernel.org/stable/c/f20d2d3b3364ce6525c050a8b6b4c54c8c19674d - https://git.kernel.org/stable/c/247d3809e45a34d9e1a3a2bb7012e31ed8b46031 - https://git.kernel.org/stable/c/2f0ae93ec33c8456cdfbf7876b80403a6318ebce - https://git.kernel.org/stable/c/bcbb795a9e78180d74c6ab21518da87e803dfdce - https://git.kernel.org/stable/c/51422046be504515eb5a591adf0f424b62f46804 - https://git.kernel.org/stable/c/8afb048800919d0ab10c57983940eba956339f21 - https://git.kernel.org/stable/c/11c65408bd0ba1d9cd1307caa38169292de9cdfb - https://git.kernel.org/stable/c/9ec4cbf1cc55d126759051acfe328d489c5d6e60
CVE ID: CVE-2022-49390 State: PUBLISHED Published: 2025-02-26T02:11:23.327Z Last Updated: 2025-05-04T12:44:34.195Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following: ================================================================== BUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637
c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637 default_operstate net/core/link_watch.c:42 [inline] rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54 linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161 Allocated by task 22209: ... alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235 veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748 Freed by task 8: ... kfree+0xd6/0x4d0 mm/slub.c:4552 kvfree+0x42/0x50 mm/util.c:615 device_release+0x9f/0x240 drivers/base/core.c:2229 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/
base/core.c:2229 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327 After commit faab39f63c1f ("net: allow out-of-order netdev unregistration") and commit e5f80fcf869a ("ipv6: give an IPv6 dev to blackhole_netdev"), we can add dev_hold_track() in macsec_dev_init() and dev_put_track() in macsec_free_netdev() to fix the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/78933cbc143b82d02330e00900d2fd08f2682f4e - https://git.kernel.org/stable/c/d130282179aa6051449ac8f8df1115
l.org/stable/c/78933cbc143b82d02330e00900d2fd08f2682f4e - https://git.kernel.org/stable/c/d130282179aa6051449ac8f8df1115769998a665 - https://git.kernel.org/stable/c/196a888ca6571deb344468e1d7138e3273206335
CVE ID: CVE-2022-49391 State: PUBLISHED Published: 2025-02-26T02:11:23.796Z Last Updated: 2025-10-01T19:46:51.161Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: remoteproc: mtk_scp: Fix a potential double free 'scp->rproc' is allocated using devm_rproc_alloc(), so there is no need to free it explicitly in the remove function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/adc02700236613b344a947a897fc2741d52a43b9 - https://git.kernel.org/stable/c/eac3e5b1c12f85732e60f5f8b985444d273866bb
CVE ID: CVE-2022-49392 State: PUBLISHED Published: 2025-02-26T02:11:24.258Z Last Updated: 2025-10-01T19:46:50.990Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe platform_get_resource() may fail and return NULL, so we should better check it's return value to avoid a NULL pointer dereference. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/923d34ce069e8e51a4d003caa6b66a8cd6ecd0ed - https://git.kernel.org/stable/c/90a6b6fc52bfdcfe9698454bf5bea26112abbcd1 - https://git.kernel.org/stable/c/d5f1275f101e0e8
tps://git.kernel.org/stable/c/90a6b6fc52bfdcfe9698454bf5bea26112abbcd1 - https://git.kernel.org/stable/c/d5f1275f101e0e8a172d300d897f5a12e87e3485 - https://git.kernel.org/stable/c/0e0fd55719fa081de6f9e5d9e6cef48efb04d34a
CVE ID: CVE-2022-49393 State: PUBLISHED Published: 2025-02-26T02:11:24.730Z Last Updated: 2025-05-04T08:36:43.602Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl This is another instance of incorrect use of list iterator and checking it for NULL. The list iterator value 'map' will *always* be set and non-NULL by list_for_each_entry(), so it is incorrect to assume that the iterator value will be NULL if the list is empty (in this case, the check 'if (!map) {' will always be false and never exit as expected). To fix the bug, use a new variable 'iter' as the list itera
(!map) {' will always be false and never exit as expected). To fix the bug, use a new variable 'iter' as the list iterator, while use the original variable 'map' as a dedicated pointer to point to the found element. Without this patch, Kernel crashes with below trace: Unable to handle kernel access to user memory outside uaccess routines at virtual address 0000ffff7fb03750 ... Call trace: fastrpc_map_create+0x70/0x290 [fastrpc] fastrpc_req_mem_map+0xf0/0x2dc [fastrpc] fastrpc_device_ioctl+0x138/0xc60 [fastrpc] __arm64_sys_ioctl+0xa8/0xec invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xd4/0xfc do_el0_svc+0x28/0x90 el0_svc+0x3c/0x130 el0t_64_sync_handler+0xa4/0x130 el0t_64_sync+0x18c/0
ommon.constprop.0+0xd4/0xfc do_el0_svc+0x28/0x90 el0_svc+0x3c/0x130 el0t_64_sync_handler+0xa4/0x130 el0t_64_sync+0x18c/0x190 Code: 14000016 f94000a5 eb05029f 54000260 (b94018a6) ---[ end trace 0000000000000000 ]--- References: - https://git.kernel.org/stable/c/2d12905aad462383f4e7a5fdb024d2b7ae2d10cf - https://git.kernel.org/stable/c/c5c07c5958cf0c9af6e76813e6de15d42ee49822
CVE ID: CVE-2022-49394 State: PUBLISHED Published: 2025-02-26T02:11:25.197Z Last Updated: 2025-05-04T12:44:35.305Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: Fix inflight count imbalances and IO hangs on offline iolatency needs to track the number of inflight IOs per cgroup. As this tracking can be expensive, it is disabled when no cgroup has iolatency configured for the device. To ensure that the inflight counters stay balanced, iolatency_set_limit() freezes the request_queue while manipulating the enabled counter, which ensures that no IO is in flight and thus all counters are zero. Unfortunately, iolatency