deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1952
Published: 2024-02-29
Description: Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of.


CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-1953
Published: 2024-02-29
Description: Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, 9.3.0, and 9.4.x before 9.4.2 fail to limit the number of role names requested from the API, allowing an authenticated attacker to cause the server to run out of memory and crash by issuing an unusually large HTTP request.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://mattermost.com/security-updates; https://mattermost.com/security-updates
CVE: CVE-2024-27906
Published: 2024-02-29
Description: Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.

Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/apache/airflow/pull/37290; https://github.com/apache/airflow/pull/37468; https://lists.apache.org/thread/on4f7t5sqr3vfgp1pvkck79wv7mq9st5
CVE: CVE-2024-26607
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: sii902x: Fix probing race issue

A null pointer dereference crash has been observed rarely on TI
platforms using sii9022 bridge:

[   53.271356]  sii902x_get_edid+0x34/0x70 [sii902x]
[   53.276066]  sii902x_bridge_get_edid+0x14/0x20 [sii902x]
[   53.281381]  drm_bridge_get_edid+0x20/0x34 [drm]
[   53.286305]  drm_bridge_connector_get_modes+0x8c/0xcc [drm_kms_helper]
[   53.292955]  drm_helper_probe_single_connector_modes+0x190/0x538 [drm_kms_helper]
[   53.300510]  drm_client_modeset_probe+0x1f0/0xbd4 [drm]
[   53.305958]  __drm_fb_helper_initial_config_and_unlock+0x50/0x510 [drm_kms_helper]
[   53.313611]  drm_fb_helper_initial_config+0x48/0x58 [drm_kms_helper]
[   53.320039]  drm_fbdev_dma_client_hotplug+0x84/0xd4 [drm_dma_helper]
[   53.326401]  drm_client_register+0x5c/0xa0 [drm]
[   53.331216]  drm_fbdev_dma_setup+0xc8/0x13c [drm_dma_helper]
[   53.336881]  tidss_probe+0x128/0x264 [tidss]
[   53.341174]  platform_probe+0x68/0xc4
[   53.344841]  really_probe+0x188/0x3c4
[   53.348501]  __driver_probe_device+0x7c/0x16c
[   53.352854]  driver_probe_device+0x3c/0x10c
[   53.357033]  __device_attach_driver+0xbc/0x158
[   53.361472]  bus_for_each_drv+0x88/0xe8
[   53.365303]  __device_attach+0xa0/0x1b4
[   53.369135]  device_initial_probe+0x14/0x20
[   53.373314]  bus_probe_device+0xb0/0xb4
[   53.377145]  deferred_probe_work_func+0xcc/0x124
[   53.381757]  process_one_work+0x1f0/0x518
[   53.385770]  worker_thread+0x1e8/0x3dc
[   53.389519]  kthread+0x11c/0x120
[   53.392750]  ret_from_fork+0x10/0x20

The issue here is as follows:

- tidss probes, but is deferred as sii902x is still missing.
- sii902x starts probing and enters sii902x_init().
- sii902x calls drm_bridge_add(). Now the sii902x bridge is ready from
  DRM's perspective.
- sii902x calls sii902x_audio_codec_init() and
  platform_device_register_data()
- The registration of the audio platform device causes probing of the
  deferred devices.
- tidss probes, which eventually causes sii902x_bridge_get_edid() to be
  called.
- sii902x_bridge_get_edid() tries to use the i2c to read the edid.
  However, the sii902x driver has not set up the i2c part yet, leading
  to the crash.

Fix this by moving the drm_bridge_add() to the end of the
sii902x_init(), which is also at the very end of sii902x_probe().
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/08ac6f132dd77e40f786d8af51140c96c6d739c9; https://git.kernel.org/stable/c/2a4c6af7934a7b4c304542c38fee35e09cc1770c; https://git.kernel.org/stable/c/56f96cf6eb11a1c2d594367c3becbfb06a855ec1
CVE: CVE-2024-0864
Published: 2024-02-29
Description: Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example.
By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://cert.pl/en/posts/2024/02/CVE-2024-0864; https://cert.pl/posts/2024/02/CVE-2024-0864; https://laragon.org/
CVE: CVE-2024-2001
Published: 2024-02-29
Description: A Cross-Site Scripting vulnerability in Cockpit CMS affecting version 2.7.0. This vulnerability could allow an authenticated user to upload an infected PDF file and store a malicious JavaScript payload to be executed when the file is uploaded.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cockpit-cms; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cockpit-cms
CVE: CVE-2023-52485
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Wake DMCUB before sending a command

[Why]
We can hang in place trying to send commands when the DMCUB isn't
powered on.

[How]
For functions that execute within a DC context or DC lock we can
wrap the direct calls to dm_execute_dmub_cmd/list with code that
exits idle power optimizations and reallows once we're done with
the command submission on success.

For DM direct submissions the DM will need to manage the enter/exit
sequencing manually.

We cannot invoke a DMCUB command directly within the DM execution
helper or we can deadlock.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/303197775a97416b62d4da69280d0c120a20e009; https://git.kernel.org/stable/c/[PII_REDACTED]ae294bc3697c7d0e056d7743900b39; https://git.kernel.org/stable/c/303197775a97416b62d4da69280d0c120a20e009
CVE: CVE-2024-20765
Published: 2024-02-29
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2023-6132
Published: 2024-02-29
Description: 
The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.


CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://www.aveva.com/en/support-and-success/cyber-security-updates/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-03; https://www.aveva.com/en/support-and-success/cyber-security-updates/
CVE: CVE-2024-25180
Published: 2024-02-29
Description: An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework (that lives outside of the pdfmake applicaton). Anyone installing this is responsible for ensuring that it is only available to authorized testers.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/bpampuch/pdfmake/issues/2702; https://github.com/joaoviictorti/My-CVES/blob/main/CVE-2024-25180/README.md; https://security.snyk.io/vuln/SNYK-JS-PDFMAKE-6347243
CVE: CVE-2024-0068
Published: 2024-02-29
Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://www.hypr.com/trust-center/security-advisories; https://www.hypr.com/trust-center/security-advisories
CVE: CVE-2024-1595
Published: 2024-02-29
Description: Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82

 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.


CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-053-01; https://www.cisa.gov/news-events/ics-advisories/icsa-24-053-01
CVE: CVE-2024-24246
Published: 2024-02-29
Description: Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-122
References: https://github.com/qpdf/qpdf/issues/1123; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WLK6ICPJUMOJNHZQWXAA5MPXG5JHZZL/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX3D3YCNS6CQL3774OFUROLP3EM25ILC/
CVE: CVE-2024-26548
Published: 2024-02-29
Description: An issue in vivotek Network Camera v.FD8166A-VVTK-0204j allows a remote attacker to execute arbitrary code via a crafted payload to the upload_file.cgi component.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/cwh031600/vivotek/blob/main/vivotek-FD8166A-uploadfile-dos/vivotek-FD8166A-uploadfile-analysis.md; https://github.com/cwh031600/vivotek/blob/main/vivotek-FD8166A-uploadfile-dos/vivotek-FD8166A-uploadfile-analysis.md
CVE: CVE-2024-27655
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E094-f1bd[PII_REDACTED]36ad2e3a33e59041b2?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E094-f1bd[PII_REDACTED]36ad2e3a33e59041b2?pvs=4
CVE: CVE-2024-27656
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E2A0-8ea57277c7cd4ea18dbc40bcb41a98f2?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41E2A0-8ea57277c7cd4ea18dbc40bcb41a98f2?pvs=4
CVE: CVE-2024-27657
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and possibly remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41D5B0-462500887ea3464692e3e697cc43838c?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-OOBW-0x41D5B0-462500887ea3464692e3e697cc43838c?pvs=4
CVE: CVE-2024-27658
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-395
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x44900C-8f[PII_REDACTED]4117bdea70b6113433fd?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x44900C-8f[PII_REDACTED]4117bdea70b6113433fd?pvs=4
CVE: CVE-2024-27659
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-395
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42B4C4-dfeae31d711f414796e1d9eb9cea7d31?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42B4C4-dfeae31d711f414796e1d9eb9cea7d31?pvs=4
CVE: CVE-2024-27660
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x41C708-e46f864c48114f45894f4563588d7968?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x41C708-e46f864c48114f45894f4563588d7968?pvs=4
CVE: CVE-2024-27661
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-395
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42444C-34458f12482346b291f334eea12e6fd0?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x42444C-34458f12482346b291f334eea12e6fd0?pvs=4
CVE: CVE-2024-27662
Published: 2024-02-29
Description: D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755, CWE-395
References: https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4; https://calm-healer-839.notion.site/D-LINK-DIR-823G-NPD-0x4116F0-5befc4a65457482c8c4dcb16910ab820?pvs=4
CVE: CVE-2024-2009
Published: 2024-02-29
Description: A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajax_login_submit_form of the file login\index.php of the component Argument Handler. The manipulation of the argument rsargs[] leads to information exposure through error message. The attack may be launched remotely. VDB-255266 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://vuldb.com/?ctiid.255266; https://vuldb.com/?id.255266; https://vuldb.com/?ctiid.255266
CVE: CVE-2021-46959
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

spi: Fix use-after-free with devm_spi_alloc_*

We can't rely on the contents of the devres list during
spi_unregister_controller(), as the list is already torn down at the
time we perform devres_find() for devm_spi_release_controller. This
causes devices registered with devm_spi_alloc_{master,slave}() to be
mistakenly identified as legacy, non-devm managed devices and have their
reference counters decremented below 0.

------------[ cut here ]------------
WARNING: CPU: 1 PID: 660 at lib/refcount.c:28 refcount_warn_saturate+0x108/0x174
[<b0396f04>] (refcount_warn_saturate) from [<b03c56a4>] (kobject_put+0x90/0x98)
[<b03c5614>] (kobject_put) from [<b0447b4c>] (put_device+0x20/0x24)
 r4:b6700140
[<b0447b2c>] (put_device) from [<b07515e8>] (devm_spi_release_controller+0x3c/0x40)
[<b07515ac>] (devm_spi_release_controller) from [<b045343c>] (release_nodes+0x84/0xc4)
 r5:b6700180 r4:b6700100
[<b04533b8>] (release_nodes) from [<b0454160>] (devres_release_all+0x5c/0x60)
 r8:b1638c54 r7:b117ad94 r6:b1638c10 r5:b117ad94 r4:b163dc10
[<b0454104>] (devres_release_all) from [<b044e41c>] (__device_release_driver+0x144/0x1ec)
 r5:b117ad94 r4:b163dc10
[<b044e2d8>] (__device_release_driver) from [<b044f70c>] (device_driver_detach+0x84/0xa0)
 r9:00000000 r8:00000000 r7:b117ad94 r6:b163dc54 r5:b1638c10 r4:b163dc10
[<b044f688>] (device_driver_detach) from [<b044d274>] (unbind_store+0xe4/0xf8)

Instead, determine the devm allocation state as a flag on the
controller which is guaranteed to be stable during cleanup.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/001c8e83646ad3b847b18f6ac55a54367d917d74; https://git.kernel.org/stable/c/28a5529068c51cdf0295ab1e11a99a3a909a03e4; https://git.kernel.org/stable/c/62bb2c7f2411a0045c24831f11ecacfc35610815
CVE: CVE-2021-47016
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

m68k: mvme147,mvme16x: Don't wipe PCC timer config bits

Don't clear the timer 1 configuration bits when clearing the interrupt flag
and counter overflow. As Michael reported, "This results in no timer
interrupts being delivered after the first. Initialization then hangs
in calibrate_delay as the jiffies counter is not updated."

On mvme16x, enable the timer after requesting the irq, consistent with
mvme147.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1dfb26df15fc7036a74221d43de7427f74293dae; https://git.kernel.org/stable/c/43262178c043032e7c42d00de44c818ba05f9967; https://git.kernel.org/stable/c/5d[PII_REDACTED]6cab5145978d153b9ce90e9ace21
CVE: CVE-2021-47020
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

soundwire: stream: fix memory leak in stream config error path

When stream config is failed, master runtime will release all
slave runtime in the slave_rt_list, but slave runtime is not
added to the list at this time. This patch frees slave runtime
in the config error path to fix the memory leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/2f17ac005b320c85d686088cfd4c2e7017912b88; https://git.kernel.org/stable/c/342260fe821047c3d515e3d28085d73fbdce3e80; https://git.kernel.org/stable/c/48f17f96a81763c7c8bf5500460a359b9939359f
CVE: CVE-2021-47054
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

bus: qcom: Put child node before return

Put child node before return to fix potential reference count leak.
Generally, the reference count of child is incremented and decremented
automatically in the macro for_each_available_child_of_node() and should
be decremented manually if the loop is broken in loop body.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/00f6abd3509b1d70d0ab0fbe65ce5685cebed8be; https://git.kernel.org/stable/c/3a76ec28824c01b57aa1f0927841d75e4f167cb8; https://git.kernel.org/stable/c/6b68c03dfc79cd95a58dfd03f91f6e82829a1b0c
CVE: CVE-2021-47055
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

mtd: require write permissions for locking and badblock ioctls

MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require
write permission. Depending on the hardware MEMLOCK might even be
write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK
is always write-once.

MEMSETBADBLOCK modifies the bad block table.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/077259f5e777c3c8821f6b41dee709fcda27306b; https://git.kernel.org/stable/c/1e97743fd180981bef5f01402342bb54bf1c6366; https://git.kernel.org/stable/c/5880afefe0cb9b2d5e801816acd58bfe91a96981
CVE: CVE-2021-47056
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init

ADF_STATUS_PF_RUNNING is (only) used and checked by adf_vf2pf_shutdown()
before calling adf_iov_putmsg()->mutex_lock(vf2pf_lock), however the
vf2pf_lock is initialized in adf_dev_init(), which can fail and when it
fail, the vf2pf_lock is either not initialized or destroyed, a subsequent
use of vf2pf_lock will cause issue.
To fix this issue, only set this flag if adf_dev_init() returns 0.

[    7.178404] BUG: KASAN: user-memory-access in __mutex_lock.isra.0+0x1ac/0x7c0
[    7.180345] Call Trace:
[    7.182576]  mutex_lock+0xc9/0xd0
[    7.183257]  adf_iov_putmsg+0x118/0x1a0 [intel_qat]
[    7.183541]  adf_vf2pf_shutdown+0x4d/0x7b [intel_qat]
[    7.183834]  adf_dev_shutdown+0x172/0x2b0 [intel_qat]
[    7.184127]  adf_probe+0x5e9/0x600 [qat_dh895xccvf]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/05ec8192ee4bfdf2a8894a68350dac9f1a155fa6; https://git.kernel.org/stable/c/09d16cee6285d37cc76311c29add6d97a7e4acda; https://git.kernel.org/stable/c/1ea500ce6f7c9106e4a561d28e69215f3d451818
CVE: CVE-2021-47057
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map

In the case where the dma_iv mapping fails, the return error path leaks
the memory allocated to object d.  Fix this by adding a new error return
label and jumping to this to ensure d is free'd before the return.

Addresses-Coverity: ("Resource leak")
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781; https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d; https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e
CVE: CVE-2021-47058
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

regmap: set debugfs_name to NULL after it is freed

There is a upstream commit cffa4b2122f5("regmap:debugfs:
Fix a memory leak when calling regmap_attach_dev") that
adds a if condition when create name for debugfs_name.
With below function invoking logical, debugfs_name is
freed in regmap_debugfs_exit(), but it is not created again
because of the if condition introduced by above commit.
regmap_reinit_cache()
	regmap_debugfs_exit()
	...
	regmap_debugfs_init()
So, set debugfs_name to NULL after it is freed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/2dc1554d5f0fdaf47cc5bea442b84b9226fea867; https://git.kernel.org/stable/c/b9e569ae1da3a113b3acee8703c94777fd20938a; https://git.kernel.org/stable/c/c764e375ae647832de1ee73d43a4bb3ef8a8f43d
CVE: CVE-2021-47059
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

crypto: sun8i-ss - fix result memory leak on error path

This patch fixes a memory leak on an error path.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/1dbc6a1e25be8575d6c4114d1d2b841a796507f7; https://git.kernel.org/stable/c/1f12aaf07f61122cf5074d29714ee26f8d44b0e7; https://git.kernel.org/stable/c/50e7b39b808430ad49a637dc6fb72ca93b451b13
CVE: CVE-2021-47060
Published: 2024-02-29
Description: In the Linux kernel, the following vulnerability has been resolved:

KVM: Stop looking for coalesced MMIO zones if the bus is destroyed

Abort the walk of coalesced MMIO zones if kvm_io_bus_unregister_dev()
fails to allocate memory for the new instance of the bus.  If it can't
instantiate a new bus, unregister_dev() destroys all devices _except_ the
target device.   But, it doesn't tell the caller that it obliterated the
bus and invoked the destructor for all devices that were on the bus.  In
the coalesced MMIO case, this can result in a deleted list entry
dereference due to attempting to continue iterating on coalesced_zones
after future entries (in the walk) have been deleted.

Opportunistically add curly braces to the for-loop, which encompasses
many lines but sneaks by without braces due to the guts being a single
if statement.
CVSS Score: 6.0 (MEDIUM)
References: https://git.kernel.org/stable/c/168e82f640ed1891a700bdb43e37da354b2ab63c; https://git.kernel.org/stable/c/2a20592baff59c5351c5200ec667e1a2aa22af85; https://git.kernel.org/stable/c/50cbad42bfea8c052b7ca590bd4126cdc898713c