Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-47147 State: PUBLISHED Published: 2024-03-25T09:07:43.750Z Last Updated: 2025-05-04T07:05:03.078Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix a resource leak in an error handling path If an error occurs after a successful 'pci_ioremap_bar()' call, it must be undone by a corresponding 'pci_iounmap()' call, as already done in the remove function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0e38e702f1152479e6afac34f151dbfd99417f99 - https://git.kernel.org/stable/c/9c1bb37f8cad5e2ee1933fa1da9a6baa7876a8e4
CVE ID: CVE-2021-47148 State: PUBLISHED Published: 2024-03-25T09:07:44.472Z Last Updated: 2025-05-04T07:05:09.370Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix a buffer overflow in otx2_set_rxfh_context() This function is called from ethtool_set_rxfh() and "*rss_context" comes from the user. Add some bounds checking to prevent memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/389146bc6d2bbb20714d06624b74856320ce40f7 - https://git.kernel.org/stable/c/e5cc361e21648b75f935f9571d4003aaee480214
CVE ID: CVE-2021-47149 State: PUBLISHED Published: 2024-03-25T09:07:45.189Z Last Updated: 2025-05-04T07:05:10.498Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: fujitsu: fix potential null-ptr-deref In fmvj18x_get_hwinfo(), if ioremap fails there will be NULL pointer deref. To fix this, check the return value of ioremap and return -1 to the caller in case of failure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b92170e209f7746ed72eaac98f2c2f4b9af734e6 - https://git.kernel.org/stable/c/6dbf1101594f7c76990b63c35b5a40205a914b6b - https://git.kernel.
72eaac98f2c2f4b9af734e6 - https://git.kernel.org/stable/c/6dbf1101594f7c76990b63c35b5a40205a914b6b - https://git.kernel.org/stable/c/c4f1c23edbe921ab2ecd6140d700e756cd44c5f7 - https://git.kernel.org/stable/c/7883d3895d0fbb0ba9bff0f8665f99974b45210f - https://git.kernel.org/stable/c/22049c3d40f08facd1867548716a484dad6b3251 - https://git.kernel.org/stable/c/71723a796ab7881f491d663c6cd94b29be5fba50 - https://git.kernel.org/stable/c/f14bf57a08779a5dee9936f63ada0149ea89c5e6 - https://git.kernel.org/stable/c/52202be1cd996cde6e8969a128dc27ee45a7cb5e
CVE ID: CVE-2021-47150 State: PUBLISHED Published: 2024-03-25T09:07:45.875Z Last Updated: 2025-05-04T07:05:11.743Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory allocated for the queues is failed, it can return error directly. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f - https://git.kernel.org/stable/c/
eferences: - https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f - https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a - https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd - https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f - https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8
CVE ID: CVE-2021-47151 State: PUBLISHED Published: 2024-03-25T09:07:46.508Z Last Updated: 2025-05-04T07:05:13.146Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: bcm-voter: add a missing of_node_put() Add a missing of_node_put() in of_bcm_voter_get() to avoid the reference leak. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4e3cea8035b6f1b9055e69cc6ebf9fa4e50763ae - https://git.kernel.org/stable/c/93d1dbe7043b3c9492bdf396b2e98a008435b55b - https://git.kernel.org/stable/c/a00593737f8bac2c9e97b696e7ff84a4446653e8
CVE ID: CVE-2021-47152 State: PUBLISHED Published: 2024-03-25T09:07:47.235Z Last Updated: 2025-05-04T07:05:14.263Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to 'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the
te page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current page frag end. v1 -> v2: - added missing fixes tag (Mat) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/3267a061096efc91eda52c2a0c61ba76e46e4b34 - https://git.kernel.org/stable/c/18e7f0580da15cac1e79d73683ada5a9e70980f8 - https://git.kernel.org/stable/c/29249eac5225429b898f278230a6ca2baa1ae154
CVE ID: CVE-2021-47153 State: PUBLISHED Published: 2024-03-25T09:07:47.873Z Last Updated: 2025-05-04T07:05:15.278Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Don't generate an interrupt on bus reset Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt handler (i801_isr) is not prepared for this situation and will try to process the interrupt as if it was signaling the end of a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access. This co
a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access. This condition was reproduced several times by syzbot: https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79 So disable interrupts while trying to reset the bus. Interrupts will be enabled again for the following transaction. Additional Analyst Notes: - CISA ADP Vulnrichment
e bus. Interrupts will be enabled again for the following transaction. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f9469082126cebb7337db3992d143f5e4edfe629 - https://git.kernel.org/stable/c/09c9e79f4c10cfb6b9e0e1b4dd355232e4b5a3b3 - https://git.kernel.org/stable/c/dfa8929e117b0228a7765f5c3f5988a4a028f3c6 - https://git.kernel.org/stable/c/c70e1ba2e7e65255a0ce004f531dd90dada97a8c - https://git.kernel.org/stable/c/04cc05e3716ae31b17ecdab7bc55c8170def1b8b - https://git.kernel.org/stable/c/b523feb7e8e44652f92f3babb953a976e7ccbbef - https://git.kernel.org/stable/c/1f583d3813f204449037cd2acbfc09168171362a - https://git.ke
4652f92f3babb953a976e7ccbbef - https://git.kernel.org/stable/c/1f583d3813f204449037cd2acbfc09168171362a - https://git.kernel.org/stable/c/e4d8716c3dcec47f1557024add24e1f3c09eb24b
CVE ID: CVE-2021-47154 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-11-15T21:46:52.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ - https://metacpan.org/pod/Net::CIDR::Lite - https://github.com/stigtsp/Net-CIDR-Lite/commit/23b6ff0590dc279521863a502e8
- https://metacpan.org/pod/Net::CIDR::Lite - https://github.com/stigtsp/Net-CIDR-Lite/commit/23b6ff0590dc279521863a502e890ef19a5a76fc - https://metacpan.org/dist/Net-CIDR-Lite/changes - https://lists.debian.org/debian-lts-announce/2024/03/msg00023.html
CVE ID: CVE-2021-47155 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-08-29T16:48:45.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/#net-ipv4addrhttpsmetacpanorgreleasenet-ipv4addr - https://metacpan.org/release/Net-IPv4Addr
CVE ID: CVE-2021-47156 State: PUBLISHED Published: 2024-03-18T00:00:00.000Z Last Updated: 2025-03-27T19:33:18.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ - https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes - https://metacpan.org/release/Net-IPAddress-Util
CVE ID: CVE-2021-47157 State: PUBLISHED Published: 2024-03-18T00:00:00 Last Updated: 2024-11-25T20:58:01.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kazeburo/Kossy/pull/16 - https://metacpan.org/dist/Kossy/changes
CVE ID: CVE-2021-47158 State: PUBLISHED Published: 2024-03-25T09:16:13.087Z Last Updated: 2025-05-04T07:05:16.369Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sja1105_static_config_load(), sja1105_clocking_setup() or sja1105_devlink_setup() fails, we can't just return in the middle of sja1105_setup() or memory will leak. Add a cleanup path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/dd8609f203448ca6d58ae71461208b3f6b0329b0 - https://git.kernel.org/stable/c/987e4ab8b8a4fcbf783069e03
kernel.org/stable/c/dd8609f203448ca6d58ae71461208b3f6b0329b0 - https://git.kernel.org/stable/c/987e4ab8b8a4fcbf783069e03e7524cd39ffd563 - https://git.kernel.org/stable/c/cec279a898a3b004411682f212215ccaea1cd0fb
CVE ID: CVE-2021-47159 State: PUBLISHED Published: 2024-03-25T09:16:13.815Z Last Updated: 2025-05-04T07:05:17.593Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_sset_count() fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value and the loop will corrupt memory until the system crashes. Fix this by checking for error codes and changing the type of "i" to just int. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
type of "i" to just int. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/0f2cb08c57edefb0e7b5045e0e3e9980a3d3aa37 - https://git.kernel.org/stable/c/ce5355f140a7987011388c7e30c4f8fbe180d3e8 - https://git.kernel.org/stable/c/caff86f85512b8e0d9830e8b8b0dfe13c68ce5b6 - https://git.kernel.org/stable/c/7b22466648a4f8e3e94f57ca428d1531866d1373 - https://git.kernel.org/stable/c/a269333fa5c0c8e53c92b5a28a6076a28cde3e83
CVE ID: CVE-2021-47160 State: PUBLISHED Published: 2024-03-25T09:16:14.468Z Last Updated: 2025-05-04T07:05:19.037Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks: ip link add br0 type bridge vlan_filtering 1 ip link add br1 type bridge vlan_filtering 1 ip link set swp0 master br0 ip link set swp1 master br1 ip link set br0 type bridge vlan_filtering 0 ip link set br1 type bridge vlan_filtering 0 # traffic in br0 and br1 will start leaking to each other
vlan_filtering 0 ip link set br1 type bridge vlan_filtering 0 # traffic in br0 and br1 will start leaking to each other As port_bridge_{add,del} have set up PCR_MATRIX properly, remove the PCR_MATRIX write from mt7530_port_set_vlan_aware. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ae389812733b1b1e8e07fcc238e41db166b5c78d - https://git.kernel.org/stable/c/4fe4e1f48ba119bdbc7c897c83b04ba0d08f5488 - https://git.kernel.org/stable/c/b91117b66fe875723a4e79ec6263526fffdb44d2 - https://git.kernel.org/stable/c/82ae35b6c14feae5f216913d5b433e143c756d4e - https://git.kernel.org/stable/c/474a2ddaa192777522a7499784f1d60691cd831
ble/c/82ae35b6c14feae5f216913d5b433e143c756d4e - https://git.kernel.org/stable/c/474a2ddaa192777522a7499784f1d60691cd831a
CVE ID: CVE-2021-47161 State: PUBLISHED Published: 2024-03-25T09:16:15.132Z Last Updated: 2025-05-04T07:05:20.166Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspi_request_dma()' should be undone by a 'dspi_release_dma()' call in the error handling path of the probe function, as already done in the remove function Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/10a089bae827ec30ad9b6cb7048020a62fae0cfa - https://git.kernel.org/stable/c/00450ed03a17143e2433b461a656ef9cd17c2f1d - https://gi
e827ec30ad9b6cb7048020a62fae0cfa - https://git.kernel.org/stable/c/00450ed03a17143e2433b461a656ef9cd17c2f1d - https://git.kernel.org/stable/c/15d1cc4b4b585f9a2ce72c52cca004d5d735bdf1 - https://git.kernel.org/stable/c/fe6921e3b8451a537e01c031b8212366bb386e3e - https://git.kernel.org/stable/c/12391be4724acc9269e1845ccbd881df37de4b56 - https://git.kernel.org/stable/c/680ec0549a055eb464dce6ffb4bfb736ef87236e
CVE ID: CVE-2021-47162 State: PUBLISHED Published: 2024-03-25T09:16:15.857Z Last Updated: 2025-05-04T12:41:09.415Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a good idea to append the frag skb to a skb's frag_list if the frag_list already has skbs from elsewhere, such as this skb was created by pskb_copy() where the frag_list was cloned (all the skbs in it were skb_get'ed) and shared by multiple skbs. However, the new appended frag skb should have been only seen by the current skb. Otherwise, it will cause use after free crashes as this appended frag skb are s
have been only seen by the current skb. Otherwise, it will cause use after free crashes as this appended frag skb are seen by multiple skbs but it only got skb_get called once. The same thing happens with a skb updated by pskb_may_pull() with a skb_cloned skb. Li Shuang has reported quite a few crashes caused by this when doing testing over macvlan devices: [] kernel BUG at net/core/skbuff.c:1970! [] Call Trace: [] skb_clone+0x4d/0xb0 [] macvlan_broadcast+0xd8/0x160 [macvlan] [] macvlan_process_broadcast+0x148/0x150 [macvlan] [] process_one_work+0x1a7/0x360 [] worker_thread+0x30/0x390 [] kernel BUG at mm/usercopy.c:102! [] Call Trace: [] __check_heap_object+0xd3/0x100 [] __check_object_size
d+0x30/0x390 [] kernel BUG at mm/usercopy.c:102! [] Call Trace: [] __check_heap_object+0xd3/0x100 [] __check_object_size+0xff/0x16b [] simple_copy_to_iter+0x1c/0x30 [] __skb_datagram_iter+0x7d/0x310 [] __skb_datagram_iter+0x2a5/0x310 [] skb_copy_datagram_iter+0x3b/0x90 [] tipc_recvmsg+0x14a/0x3a0 [tipc] [] ____sys_recvmsg+0x91/0x150 [] ___sys_recvmsg+0x7b/0xc0 [] kernel BUG at mm/slub.c:305! [] Call Trace: [] <IRQ> [] kmem_cache_free+0x3ff/0x400 [] __netif_receive_skb_core+0x12c/0xc40 [] ? kmem_cache_alloc+0x12e/0x270 [] netif_receive_skb_internal+0x3d/0xb0 [] ? get_rx_page_info+0x8e/0xa0 [be2net] [] be_poll+0x6ef/0xd00 [be2net] [] ? irq_exit+0x4f/0x100 [] net_rx_action+0x149/0x3b0 ... This
_info+0x8e/0xa0 [be2net] [] be_poll+0x6ef/0xd00 [be2net] [] ? irq_exit+0x4f/0x100 [] net_rx_action+0x149/0x3b0 ... This patch is to fix it by linearizing the head skb if it has frag_list set in tipc_buf_append(). Note that we choose to do this before calling skb_unshare(), as __skb_linearize() will avoid skb_copy(). Also, we can not just drop the frag_list either as the early time. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b2c8d28c34b3070407cb1741f9ba3f15d0284b8b - https://git.kernel.org/stable/c/5489f30bb78ff0dafb4229a69632afc2ba20765c - https://git.kernel.org/stable/c/436d650d374329a591c30339a91fa5078052ed1e -
c/5489f30bb78ff0dafb4229a69632afc2ba20765c - https://git.kernel.org/stable/c/436d650d374329a591c30339a91fa5078052ed1e - https://git.kernel.org/stable/c/4b1761898861117c97066aea6c58f68a7787f0bf - https://git.kernel.org/stable/c/64d17ec9f1ded042c4b188d15734f33486ed9966 - https://git.kernel.org/stable/c/6da24cfc83ba4f97ea44fc7ae9999a006101755c - https://git.kernel.org/stable/c/ace300eecbccaa698e2b472843c74a5f33f7dce8 - https://git.kernel.org/stable/c/b7df21cf1b79ab7026f545e7bf837bd5750ac026
CVE ID: CVE-2021-47163 State: PUBLISHED Published: 2024-03-25T09:16:16.676Z Last Updated: 2025-05-04T07:05:22.258Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a crash could be triggered simply by repeating these commands several times: # modprobe tipc # tipc bearer enable media udp name UDP1 localip 127.0.0.1 # rmmod tipc [] BUG: unable to handle kernel paging request at ffffffffc096bb00 [] Workqueue: events 0xffffffffc096bb00 [] Call Trace: [] ? process_one_work+0x1a7/0x360 [] ? worker_thread+0x30/0x390 [] ? create_worker+0x1a0/0x1a0 [] ? kthread+0x116/0x130 [
] ? process_one_work+0x1a7/0x360 [] ? worker_thread+0x30/0x390 [] ? create_worker+0x1a0/0x1a0 [] ? kthread+0x116/0x130 [] ? kthread_flush_work_fn+0x10/0x10 [] ? ret_from_fork+0x35/0x40 When removing the TIPC module, the UDP tunnel sock will be delayed to release in a work queue as sock_release() can't be done in rtnl_lock(). If the work queue is schedule to run after the TIPC module is removed, kernel will crash as the work queue function cleanup_beareri() code no longer exists when trying to invoke it. To fix it, this patch introduce a member wq_count in tipc_net to track the numbers of work queues in schedule, and wait and exit until all work queues are done in tipc_exit_net(). Additional
the numbers of work queues in schedule, and wait and exit until all work queues are done in tipc_exit_net(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d1f76dfadaf8f47ed1753f97dbcbd41c16215ffa - https://git.kernel.org/stable/c/5195ec5e365a2a9331bfeb585b613a6e94f98dba - https://git.kernel.org/stable/c/b9f5b7ad4ac3af006443f535b1ce7bff1d130d7d - https://git.kernel.org/stable/c/04c26faa51d1e2fe71cf13c45791f5174c37f986
CVE ID: CVE-2021-47164 State: PUBLISHED Published: 2024-03-25T09:16:17.592Z Last Updated: 2025-05-04T07:05:23.324Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev is null so stop processing the event. In bond_enslave() the active/backup slave being set before setting the upper dev so first event is without an upper dev. After setting the upper dev with bond_master_upper_dev_link() there is a second event and in that event we have an upper dev. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2e4b0b95a489259f9d35a3db17023061f8f3d587 - https://git.kernel.org/stable/c/bdfd3593a8248eea6ecfcbf7b47b56b86515672d - https://git.kernel.org/stable/c/83026d83186bc48bb41ee4872f339b83f31dfc55
CVE ID: CVE-2021-47165 State: PUBLISHED Published: 2024-03-25T09:16:18.321Z Last Updated: 2025-05-04T12:41:10.703Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main component is not probed, by example when the dw-hdmi module is not loaded yet or in probe defer, the following crash appears on shutdown: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000038 ... pc : meson_drv_shutdown+0x24/0x50 lr : platform_drv_shutdown+0x20/0x30 ... Call trace: meson_drv_shutdown+0x24/0x50 platform_drv_shutdown+0x20/0x30 device_shutdown+0x158/0x360 kern
+0x20/0x30 ... Call trace: meson_drv_shutdown+0x24/0x50 platform_drv_shutdown+0x20/0x30 device_shutdown+0x158/0x360 kernel_restart_prepare+0x38/0x48 kernel_restart+0x18/0x68 __do_sys_reboot+0x224/0x250 __arm64_sys_reboot+0x24/0x30 ... Simply check if the priv struct has been allocated before using it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b4298d33c1fcce511ffe84d8d3de07e220300f9b - https://git.kernel.org/stable/c/e256a0eb43e17209e347409a80805b1659398d68 - https://git.kernel.org/stable/c/4ce2bf20b4a6e307e114847d60b2bf40a6a1fac0 - https://git.kernel.org/stable/c/d66083c0d6f5125a4d982aa177dd71ab4cd3d212 - https:/
f20b4a6e307e114847d60b2bf40a6a1fac0 - https://git.kernel.org/stable/c/d66083c0d6f5125a4d982aa177dd71ab4cd3d212 - https://git.kernel.org/stable/c/b4b91033a0b11fe9ade58156cd9168f89f4a8c1a - https://git.kernel.org/stable/c/7cfc4ea78fc103ea51ecbacd9236abb5b1c490d2
CVE ID: CVE-2021-47166 State: PUBLISHED Published: 2024-03-25T09:16:19.133Z Last Updated: 2025-05-04T07:05:25.815Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() The value of mirror->pg_bytes_written should only be updated after a successful attempt to flush out the requests on the list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/e8b8418ce14ae66ee55179901edd12191ab06a9e - https://git.kernel.org/stable/c/b291baae24f876acd5a5dd57d0bb2bbac8a68b0c - https://git.kernel.org/stable/c/c7