Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52636 State: PUBLISHED Published: 2024-04-02T07:01:38.187Z Last Updated: 2025-05-04T07:40:28.409Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket A short read may occur while reading the message footer from the socket. Later, when the socket is ready for another read, the messenger invokes all read_partial_*() handlers, including read_partial_sparse_msg_data(). The expectation is that read_partial_sparse_msg_data() would bail, allowing the messenger to invoke read_partial() for the footer and pick up where it left off. However read_partial_sparse_msg
ing the messenger to invoke read_partial() for the footer and pick up where it left off. However read_partial_sparse_msg_data() violates that and ends up calling into the state machine in the OSD client. The sparse-read state machine assumes that it's a new op and interprets some piece of the footer as the sparse-read header and returns bogus extents/data length, etc. To determine whether read_partial_sparse_msg_data() should bail, let's reuse cursor->total_resid. Because once it reaches to zero that means all the extents and data have been successfully received in last read, else it could break out when partially reading any of the extents and data. And then osd_sparse_read() could continue
d, else it could break out when partially reading any of the extents and data. And then osd_sparse_read() could continue where it left off. [ idryomov: changelog ] Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/da9c33a70f095d5d55c36d0bfeba969e31de08ae - https://git.kernel.org/stable/c/bd9442e553ab8bf74b8be3b3c0a43bf4af4dc9b8 - https://git.kernel.org/stable/c/8e46a2d068c92a905d01cbb018b00d66991585ab
CVE ID: CVE-2023-52637 State: PUBLISHED Published: 2024-04-03T14:54:40.262Z Last Updated: 2025-05-04T07:40:29.900Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) Lock jsk->sk to prevent UAF when setsockopt(..., SO_J1939_FILTER, ...) modifies jsk->filters while receiving packets. Following trace was seen on affected system: ================================================================== BUG: KASAN: slab-use-after-free in j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] Read of size 4 at addr ffff888012144014 by task j1939/350 CPU: 0 PID: 350 Comm:
_recv_match_one+0x1af/0x2d0 [can_j1939] Read of size 4 at addr ffff888012144014 by task j1939/350 CPU: 0 PID: 350 Comm: j1939 Tainted: G W OE 6.5.0-rc5 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Call Trace: print_report+0xd3/0x620 ? kasan_complete_mode_report_info+0x7d/0x200 ? j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] kasan_report+0xc2/0x100 ? j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] __asan_load4+0x84/0xb0 j1939_sk_recv_match_one+0x1af/0x2d0 [can_j1939] j1939_sk_recv+0x20b/0x320 [can_j1939] ? __kasan_check_write+0x18/0x20 ? __pfx_j1939_sk_recv+0x10/0x10 [can_j1939] ? j1939_simple_recv+0x69/0x280 [can_j1939] ? j1939_ac_recv+0x5e/0x
0x18/0x20 ? __pfx_j1939_sk_recv+0x10/0x10 [can_j1939] ? j1939_simple_recv+0x69/0x280 [can_j1939] ? j1939_ac_recv+0x5e/0x310 [can_j1939] j1939_can_recv+0x43f/0x580 [can_j1939] ? __pfx_j1939_can_recv+0x10/0x10 [can_j1939] ? raw_rcv+0x42/0x3c0 [can_raw] ? __pfx_j1939_can_recv+0x10/0x10 [can_j1939] can_rcv_filter+0x11f/0x350 [can] can_receive+0x12f/0x190 [can] ? __pfx_can_rcv+0x10/0x10 [can] can_rcv+0xdd/0x130 [can] ? __pfx_can_rcv+0x10/0x10 [can] __netif_receive_skb_one_core+0x13d/0x150 ? __pfx___netif_receive_skb_one_core+0x10/0x10 ? __kasan_check_write+0x18/0x20 ? _raw_spin_lock_irq+0x8c/0xe0 __netif_receive_skb+0x23/0xb0 process_backlog+0x107/0x260 __napi_poll+0x69/0x310 net_rx_action+0x2a1/
lock_irq+0x8c/0xe0 __netif_receive_skb+0x23/0xb0 process_backlog+0x107/0x260 __napi_poll+0x69/0x310 net_rx_action+0x2a1/0x580 ? __pfx_net_rx_action+0x10/0x10 ? __pfx__raw_spin_lock+0x10/0x10 ? handle_irq_event+0x7d/0xa0 __do_softirq+0xf3/0x3f8 do_softirq+0x53/0x80 </IRQ> <TASK> __local_bh_enable_ip+0x6e/0x70 netif_rx+0x16b/0x180 can_send+0x32b/0x520 [can] ? __pfx_can_send+0x10/0x10 [can] ? __check_object_size+0x299/0x410 raw_sendmsg+0x572/0x6d0 [can_raw] ? __pfx_raw_sendmsg+0x10/0x10 [can_raw] ? apparmor_socket_sendmsg+0x2f/0x40 ? __pfx_raw_sendmsg+0x10/0x10 [can_raw] sock_sendmsg+0xef/0x100 sock_write_iter+0x162/0x220 ? __pfx_sock_write_iter+0x10/0x10 ? __rtnl_unlock+0x47/0x80 ? security_fi
sendmsg+0xef/0x100 sock_write_iter+0x162/0x220 ? __pfx_sock_write_iter+0x10/0x10 ? __rtnl_unlock+0x47/0x80 ? security_file_permission+0x54/0x320 vfs_write+0x6ba/0x750 ? __pfx_vfs_write+0x10/0x10 ? __fget_light+0x1ca/0x1f0 ? __rcu_read_unlock+0x5b/0x280 ksys_write+0x143/0x170 ? __pfx_ksys_write+0x10/0x10 ? __kasan_check_read+0x15/0x20 ? fpregs_assert_state_consistent+0x62/0x70 __x64_sys_write+0x47/0x60 do_syscall_64+0x60/0x90 ? do_syscall_64+0x6d/0x90 ? irqentry_exit+0x3f/0x50 ? exc_page_fault+0x79/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Allocated by task 348: kasan_save_stack+0x2a/0x50 kasan_set_track+0x29/0x40 kasan_save_alloc_info+0x1f/0x30 __kasan_kmalloc+0xb5/0xc0 __kmalloc_node_tr
ve_stack+0x2a/0x50 kasan_set_track+0x29/0x40 kasan_save_alloc_info+0x1f/0x30 __kasan_kmalloc+0xb5/0xc0 __kmalloc_node_track_caller+0x67/0x160 j1939_sk_setsockopt+0x284/0x450 [can_j1939] __sys_setsockopt+0x15c/0x2f0 __x64_sys_setsockopt+0x6b/0x80 do_syscall_64+0x60/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Freed by task 349: kasan_save_stack+0x2a/0x50 kasan_set_track+0x29/0x40 kasan_save_free_info+0x2f/0x50 __kasan_slab_free+0x12e/0x1c0 __kmem_cache_free+0x1b9/0x380 kfree+0x7a/0x120 j1939_sk_setsockopt+0x3b2/0x450 [can_j1939] __sys_setsockopt+0x15c/0x2f0 __x64_sys_setsockopt+0x6b/0x80 do_syscall_64+0x60/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Additional Analyst Notes: - CISA ADP Vul
kopt+0x6b/0x80 do_syscall_64+0x60/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/08de58abedf6e69396e1207e4f99ef8904b2b532 - https://git.kernel.org/stable/c/978e50ef8c38dc71bd14d1b0143d554ff5d188ba - https://git.kernel.org/stable/c/41ccb5bcbf03f02d820bc6ea8390811859f558f8 - https://git.kernel.org/stable/c/4dd684d4bb3cd5454e0bf6e2a1bdfbd5c9c872ed - https://git.kernel.org/stable/c/f84e7534457dcd7835be743517c35378bb4e7c50 - https://git.kernel.org/stable/c/fc74b9cb789cae061bbca7b203a3842e059f6b5d - https://git.kernel.org/stable/c/efe7cf828039aedb297c1f9920b638fffee6aabc
CVE ID: CVE-2023-52638 State: PUBLISHED Published: 2024-04-03T14:54:41.271Z Last Updated: 2025-05-04T07:40:31.277Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock The following 3 locks would race against each other, causing the deadlock situation in the Syzbot bug report: - j1939_socks_lock - active_session_list_lock - sk_session_queue_lock A reasonable fix is to change j1939_socks_lock to an rwlock, since in the rare situations where a write lock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more l
ock is required for the linked list that j1939_socks_lock is protecting, the code does not attempt to acquire any more locks. This would break the circular lock dependency, where, for example, the current thread already locks j1939_socks_lock and attempts to acquire sk_session_queue_lock, and at the same time, another thread attempts to acquire j1939_socks_lock while holding sk_session_queue_lock. NOTE: This patch along does not fix the unregister_netdevice bug reported by Syzbot; instead, it solves a deadlock situation to prepare for one or more further patches to actually fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase. [mkl: remove unrelated
fix the Syzbot bug, which appears to be a reference counting problem within the j1939 codebase. [mkl: remove unrelated newline change] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/03358aba991668d3bb2c65b3c82aa32c36851170 - https://git.kernel.org/stable/c/aedda066d717a0b4335d7e0a00b2e3a61e40afcf - https://git.kernel.org/stable/c/26dfe112ec2e95fe0099681f6aec33da13c2dd8e - https://git.kernel.org/stable/c/559b6322f9480bff68cfa98d108991e945a4f284 - https://git.kernel.org/stable/c/6cdedc18ba7b9dacc36466e27e3267d201948c8d
CVE ID: CVE-2023-52639 State: PUBLISHED Published: 2024-04-03T14:54:47.009Z Last Updated: 2025-05-04T07:40:32.734Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->private being zero in kvm_s390_vsie_gmap_notifier resulting in a crash. This is due to the fact that we add gmap->private == kvm after creation: static int acquire_gmap_shadow(struct kvm_vcpu *vcpu, struct vsie_page *vsie_page) { [...] gmap = gmap_shadow(vcpu->arch.gmap, asce, edat); if (IS_ERR(gmap)) return PTR_ERR(gmap); gmap->private = vcpu->kvm; Let children inherit the private f
gmap, asce, edat); if (IS_ERR(gmap)) return PTR_ERR(gmap); gmap->private = vcpu->kvm; Let children inherit the private field of the parent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5df3b81a567eb565029563f26f374ae3803a1dfc - https://git.kernel.org/stable/c/f5572c0323cf8b4f1f0618178648a25b8fb8a380 - https://git.kernel.org/stable/c/28bb27824f25f36e5f80229a358d66ee09244082 - https://git.kernel.org/stable/c/fe752331d4b361d43cfd0b89534b4b2176057c32
CVE ID: CVE-2023-52640 State: PUBLISHED Published: 2024-04-03T17:00:10.216Z Last Updated: 2025-05-04T07:40:34.278Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/a585faf0591548fe0920641950ebfa8a6eefe1cd - https://git.kernel.org/stable/c/6ed6cdbe88334ca3430c5aee7754dc4597498dfb - https://git.kernel.org/stable/c/52fff5799e3d1b5803ecd2f5f19c13c65f4f7b23 - https://git.kernel.org/stable/c/0830c5cf19bdec50d0ede4755ddc463
.org/stable/c/52fff5799e3d1b5803ecd2f5f19c13c65f4f7b23 - https://git.kernel.org/stable/c/0830c5cf19bdec50d0ede4755ddc463663deb21c - https://git.kernel.org/stable/c/731ab1f9828800df871c5a7ab9ffe965317d3f15
CVE ID: CVE-2023-52641 State: PUBLISHED Published: 2024-04-03T17:00:16.041Z Last Updated: 2025-05-04T07:40:35.468Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() It is preferable to exit through the out: label because internal debugging functions are located there. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ee8db6475cb15c8122855f72ad4cfa5375af6a7b - https://git.kernel.org/stable/c/50545eb6cd5f7ff852a01fa29b7372524ef948cc - https://git.kernel.org/stable/c/947c3f3d31ea185dd
s://git.kernel.org/stable/c/50545eb6cd5f7ff852a01fa29b7372524ef948cc - https://git.kernel.org/stable/c/947c3f3d31ea185ddc8e7f198873f17d36deb24c - https://git.kernel.org/stable/c/847b68f58c212f0439c5a8101b3841f32caffccd - https://git.kernel.org/stable/c/aaab47f204aaf47838241d57bf8662c8840de60a
CVE ID: CVE-2023-52642 State: PUBLISHED Published: 2024-04-17T09:43:45.183Z Last Updated: 2025-05-04T07:40:41.798Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permission Note that bpf attach/detach also requires CAP_NET_ADMIN. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/93d8109bf182510629bbefc8cd45296d2393987f - https://git.kernel.org/stable/c/d98210108e7b2ff64b332b0a3541c8ad6a0617b0 - https://git.kernel.org/stable/c/9f6087851ec6dce5b15f694aeaf3e8ec8243224e - https://git.kernel.org/stable/c/93136132d1b579
ttps://git.kernel.org/stable/c/9f6087851ec6dce5b15f694aeaf3e8ec8243224e - https://git.kernel.org/stable/c/93136132d1b5792bf44151e3494ae3691cd738e8 - https://git.kernel.org/stable/c/caf2da1d4562de4e35eedec0be2b7f1ee25d83be - https://git.kernel.org/stable/c/6a9d552483d50953320b9d3b57abdee8d436f23f
CVE ID: CVE-2023-52643 State: PUBLISHED Published: 2024-04-17T09:43:45.813Z Last Updated: 2025-05-04T07:40:43.190Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iio_device_register_sysfs When iio_device_register_sysfs_group() fails, we should free iio_dev_opaque->chan_attr_group.attrs to prevent potential memleak. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/1c6d19c8cbf6abcea2c8fca2db26abca2cbf0363 - https://git.kernel.org/stable/c/359f220d0e753bba840eac19ffedcdc816b532f2 - https://git.kernel.org/stable/c/b90126c86d8391268850
/git.kernel.org/stable/c/359f220d0e753bba840eac19ffedcdc816b532f2 - https://git.kernel.org/stable/c/b90126c86d83912688501826643ea698f0df1728 - https://git.kernel.org/stable/c/3db312e06851996e7fb27cb5a8ccab4c0f9cdb93 - https://git.kernel.org/stable/c/95a0d596bbd0552a78e13ced43f2be1038883c81
CVE ID: CVE-2023-52644 State: PUBLISHED Published: 2024-04-17T10:27:23.053Z Last Updated: 2025-05-04T07:40:44.633Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled When QoS is disabled, the queue priority value will not map to the correct ieee80211 queue since there is only one queue. Stop/wake queue 0 when QoS is disabled to prevent trying to stop/wake a non-existent queue and failing to stop/wake the actual queue instantiated. Log of issue before change (with kernel parameter qos=0): [ +5.112651] ------------[ cut here ]------------ [ +0.000005] WARNING: CPU
before change (with kernel parameter qos=0): [ +5.112651] ------------[ cut here ]------------ [ +0.000005] WARNING: CPU: 7 PID: 25513 at net/mac80211/util.c:449 __ieee80211_wake_queue+0xd5/0x180 [mac80211] [ +0.000067] Modules linked in: b43(O) snd_seq_dummy snd_hrtimer snd_seq snd_seq_device nft_chain_nat xt_MASQUERADE nf_nat xfrm_user xfrm_algo xt_addrtype overlay ccm af_packet amdgpu snd_hda_codec_cirrus snd_hda_codec_generic ledtrig_audio drm_exec amdxcp gpu_sched xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_rpfilter ipt_rpfilter xt_pkttype xt_LOG nf_log_syslog xt_tcpudp nft_compat nf_tables nfnetlink sch_fq_codel btusb uinput iTCO_wdt ctr btrtl intel_pmc_bxt i915 intel_
g_syslog xt_tcpudp nft_compat nf_tables nfnetlink sch_fq_codel btusb uinput iTCO_wdt ctr btrtl intel_pmc_bxt i915 intel_rapl_msr mei_hdcp mei_pxp joydev at24 watchdog btintel atkbd libps2 serio radeon btbcm vivaldi_fmap btmtk intel_rapl_common snd_hda_codec_hdmi bluetooth uvcvideo nls_iso8859_1 applesmc nls_cp437 x86_pkg_temp_thermal snd_hda_intel intel_powerclamp vfat videobuf2_vmalloc coretemp fat snd_intel_dspcfg crc32_pclmul uvc polyval_clmulni snd_intel_sdw_acpi loop videobuf2_memops snd_hda_codec tun drm_suballoc_helper polyval_generic drm_ttm_helper drm_buddy tap ecdh_generic videobuf2_v4l2 gf128mul macvlan ttm ghash_clmulni_intel ecc tg3 [ +0.000044] videodev bridge snd_hda_core rapl
h_generic videobuf2_v4l2 gf128mul macvlan ttm ghash_clmulni_intel ecc tg3 [ +0.000044] videodev bridge snd_hda_core rapl crc16 drm_display_helper cec mousedev snd_hwdep evdev intel_cstate bcm5974 hid_appleir videobuf2_common stp mac_hid libphy snd_pcm drm_kms_helper acpi_als mei_me intel_uncore llc mc snd_timer intel_gtt industrialio_triggered_buffer apple_mfi_fastcharge i2c_i801 mei snd lpc_ich agpgart ptp i2c_smbus thunderbolt apple_gmux i2c_algo_bit kfifo_buf video industrialio soundcore pps_core wmi tiny_power_button sbs sbshc button ac cordic bcma mac80211 cfg80211 ssb rfkill libarc4 kvm_intel kvm drm irqbypass fuse backlight firmware_class efi_pstore configfs efivarfs dmi_sysfs ip_tabl
rfkill libarc4 kvm_intel kvm drm irqbypass fuse backlight firmware_class efi_pstore configfs efivarfs dmi_sysfs ip_tables x_tables autofs4 dm_crypt cbc encrypted_keys trusted asn1_encoder tee tpm rng_core input_leds hid_apple led_class hid_generic usbhid hid sd_mod t10_pi crc64_rocksoft crc64 crc_t10dif crct10dif_generic ahci libahci libata uhci_hcd ehci_pci ehci_hcd crct10dif_pclmul crct10dif_common sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 aesni_intel usbcore scsi_mod libaes crypto_simd cryptd scsi_common [ +0.000055] usb_common rtc_cmos btrfs blake2b_generic libcrc32c crc32c_generic crc32c_intel xor raid6_pq dm_snapshot dm_bufio dm_mod dax [last unloaded: b43(O)] [ +0.000009] C
ibcrc32c crc32c_generic crc32c_intel xor raid6_pq dm_snapshot dm_bufio dm_mod dax [last unloaded: b43(O)] [ +0.000009] CPU: 7 PID: 25513 Comm: irq/17-b43 Tainted: G W O 6.6.7 #1-NixOS [ +0.000003] Hardware name: Apple Inc. MacBookPro8,3/Mac-942459F5819B171B, BIOS 87.0.0.0.0 06/13/2019 [ +0.000001] RIP: 0010:__ieee80211_wake_queue+0xd5/0x180 [mac80211] [ +0.000046] Code: 00 45 85 e4 0f 85 9b 00 00 00 48 8d bd 40 09 00 00 f0 48 0f ba ad 48 09 00 00 00 72 0f 5b 5d 41 5c 41 5d 41 5e e9 cb 6d 3c d0 <0f> 0b 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc 48 8d b4 16 94 00 00 [ +0.000002] RSP: 0018:ffffc90003c77d60 EFLAGS: 00010097 [ +0.000001] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 00000000000000
RSP: 0018:ffffc90003c77d60 EFLAGS: 00010097 [ +0.000001] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000000000000 [ +0.000001] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88820b924900 [ +0.000002] RBP: ffff88820b924900 R08: ffffc90003c77d90 R09: 000000000003bfd0 [ +0.000001] R10: ffff88820b924900 R11: ffffc90003c77c68 R12: 0000000000000000 [ +0.000001] R13: 0000000000000000 R14: ffffc90003c77d90 R15: ffffffffc0fa6f40 [ +0.000001] FS: 0000000000000000(0000) GS:ffff88846fb80000(0000) knlGS:0000000000000000 [ +0.000001] CS: 0010 DS: 0 ---truncated--- Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1824f9
al Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/1824f942527f784a19e01eac2d9679a21623d010 - https://git.kernel.org/stable/c/31aaf17200c336fe258b70d39c40645ae19d0240 - https://git.kernel.org/stable/c/49f067726ab01c87cf57566797a8a719badbbf08 - https://git.kernel.org/stable/c/04a2b6eff2ae1c19cb7f41e803bcbfaf94c06455 - https://git.kernel.org/stable/c/c67698325c68f8768db858f5c87c34823421746d - https://git.kernel.org/stable/c/bc845e2e42cae95172c04bf29807c480f51a2a83 - https://git.kernel.org/stable/c/4049a9f80513a6739c5677736a4c88f96df1b436 - https://git.kernel.org/stable/c/f1cf77bb870046a6111a604f7f7fe83d1c8c9610 - https://git.kernel
9c5677736a4c88f96df1b436 - https://git.kernel.org/stable/c/f1cf77bb870046a6111a604f7f7fe83d1c8c9610 - https://git.kernel.org/stable/c/9636951e4468f02c72cc75a82dc65d003077edbc
CVE ID: CVE-2023-52645 State: PUBLISHED Published: 2024-04-17T15:59:21.343Z Last Updated: 2025-05-04T07:40:46.087Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered first with genpd and *after that* the driver attempts to power them on in the probe sequence, then it is possible that a race condition occurs if genpd tries to power them on in the same time. The same is valid for powering them off before unregistering them from genpd. Attempt to fix race conditions by first removing the domains from genpd and *after that* powering down domains. Als
npd. Attempt to fix race conditions by first removing the domains from genpd and *after that* powering down domains. Also first power up the domains and *after that* register them to genpd. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 - https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff - https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 - https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b - https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5
CVE ID: CVE-2023-52646 State: PUBLISHED Published: 2024-04-26T12:19:32.167Z Last Updated: 2025-05-04T07:40:47.360Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d3e720e7 ("aio: Make it possible to remap aio ring") introduced a null-deref if mremap is called on an old aio mapping after fork as mm->ioctx_table will be set to NULL. [jmoyer@redhat.com: fix 80 column issue] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/808f1e4b5723ae4eda724d2ad6f6638905eefd95 - https://git.kernel.org/stable/c/d8dca1bfe9adcae3
ps://git.kernel.org/stable/c/808f1e4b5723ae4eda724d2ad6f6638905eefd95 - https://git.kernel.org/stable/c/d8dca1bfe9adcae38b35add64977818c0c13dd22 - https://git.kernel.org/stable/c/4326d0080f7e84fba775da41d158f46cf9d3f1c2 - https://git.kernel.org/stable/c/c261f798f7baa8080cf0214081d43d5f86bb073f - https://git.kernel.org/stable/c/178993157e8c50aef7f35d7d6d3b44bb428199e1 - https://git.kernel.org/stable/c/af126acf01a12bdb04986fd26fc2eb3b40249e0d - https://git.kernel.org/stable/c/81e9d6f8647650a7bead74c5f926e29970e834d1
CVE ID: CVE-2023-52647 State: PUBLISHED Published: 2024-05-01T05:16:57.465Z Last Updated: 2025-05-04T07:40:48.687Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev connected to the sink pad. The remote pad may be NULL, if userspace tries to enable a stream that ends at an unconnected crossbar sink. When that occurs, the driver dereferences the NULL pad, leading to a crash. Prevent the crash by checking if the pad is NULL before using it, and return
ferences the NULL pad, leading to a crash. Prevent the crash by checking if the pad is NULL before using it, and return an error if it is. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/c95318607fbe8fdd44991a8dad2e44118e6b8812 - https://git.kernel.org/stable/c/c4bd29bf5b7f67925bc1abd16069f22dadf5f061 - https://git.kernel.org/stable/c/91c8ce42fcde09f1da24acab9013b3e19cb88a4e - https://git.kernel.org/stable/c/eb2f932100288dbb881eadfed02e1459c6b9504c
CVE ID: CVE-2023-52648 State: PUBLISHED Published: 2024-05-01T05:17:02.278Z Last Updated: 2025-05-04T07:40:50.161Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it on a plane state Switch to a new plane state requires unreferencing of all held surfaces. In the work required for mob cursors the mapped surfaces started being cached but the variable indicating whether the surface is currently mapped was not being reset. This leads to crashes as the duplicated state, incorrectly, indicates the that surface is mapped even when no surface is present. That's because after unreferencing t