deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-5516
Published: 2024-05-30
Description: A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file massage.php. The manipulation of the argument bid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266587.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/ppp-src/ha/issues/3; https://vuldb.com/?ctiid.266587; https://vuldb.com/?id.266587
CVE: CVE-2024-35504
Published: 2024-05-30
Description: A cross-site scripting (XSS) vulnerability in the login page of FineSoft v8.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL:errorname parameter after a failed login attempt.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/dabaizhizhu/123/issues/1; https://github.com/dabaizhizhu/123/issues/1
CVE: CVE-2024-36018
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

nouveau/uvmm: fix addr/range calcs for remap operations

dEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8
was causing a remap operation like the below.

op_remap: prev: 0000003fffed0[PII_REDACTED]0000f0[PII_REDACTED]0a5abd18a [PII_REDACTED]
op_remap: next:
op_remap: unmap: 0000003fffed0000 [PII_REDACTED] 0
op_map: map: 0000003ffffc0000 [PII_REDACTED] 000000005b1ba33c[PII_REDACTED]0e0000

This was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000
which was corrupting the pagetables and oopsing the kernel.

Fixes the prev + unmap range calcs to use start/end and map back to addr/range.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://git.kernel.org/stable/c/0c16020d2b69a602c8ae6a1dd2aac9a3023249d6; https://git.kernel.org/stable/c/692a51bebf4552bdf0a79ccd68d291182a26a569; https://git.kernel.org/stable/c/be141849ec00ef39935bf169c0f194ac70bf85ce
CVE: CVE-2024-36019
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

regmap: maple: Fix cache corruption in regcache_maple_drop()

When keeping the upper end of a cache block entry, the entry[] array
must be indexed by the offset from the base register of the block,
i.e. max - mas.index.

The code was indexing entry[] by only the register address, leading
to an out-of-bounds access that copied some part of the kernel
memory over the cache contents.

This bug was not detected by the regmap KUnit test because it only
tests with a block of registers starting at 0, so mas.index == 0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/00bb549d7d63a21532e76e4a334d7807a54d9f31; https://git.kernel.org/stable/c/3af6c5ac72dc5b721058132a0a1d7779e443175e; https://git.kernel.org/stable/c/51c4440b9d3fd7c8234e6de9170a487c03506e53
CVE: CVE-2024-36020
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

i40e: fix vf may be used uninitialized in this function warning

To fix the regression introduced by commit 52424f974bc5, which causes
servers hang in very hard to reproduce conditions with resets races.
Using two sources for the information is the root cause.
In this function before the fix bumping v didn't mean bumping vf
pointer. But the code used this variables interchangeably, so stale vf
could point to different/not intended vf.

Remove redundant "v" variable and iterate via single VF pointer across
whole function instead to guarantee VF pointer validity.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/06df7618f591b2dc43c59967e294d7b9fc8675b6; https://git.kernel.org/stable/c/0dcf573f[PII_REDACTED]17af1563aa2493dc772fc0; https://git.kernel.org/stable/c/3e89846283f3cf7c7a8e28b342576fd7c561d2ba
CVE: CVE-2024-36021
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix kernel crash when devlink reload during pf initialization

The devlink reload process will access the hardware resources,
but the register operation is done before the hardware is initialized.
So, processing the devlink reload during initialization may lead to kernel
crash. This patch fixes this by taking devl_lock during initialization.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://git.kernel.org/stable/c/1b550dae55901c2cc9075d6a7155a71b4f516e86; https://git.kernel.org/stable/c/50b69054f455dcdb34bd6b22764c7579b270eef3; https://git.kernel.org/stable/c/7ca0f73e5e2da3c129935b97f3a0877cce8ebdf5
CVE: CVE-2024-36022
Published: 2024-05-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2024-36023
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

Julia Lawall reported this null pointer dereference, this should fix it.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/214a6c4a28c11d67044e6cf3a0ab415050d9f03a; https://git.kernel.org/stable/c/2e2177f94c0e0bc41323d7b6975a5f4820ed347e; https://git.kernel.org/stable/c/9bf93dcfc453fae192fe5d7874b89699e8f800ac
CVE: CVE-2024-36024
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Disable idle reallow as part of command/gpint execution

[Why]
Workaroud for a race condition where DMCUB is in the process of
committing to IPS1 during the handshake causing us to miss the
transition into IPS2 and touch the INBOX1 RPTR causing a HW hang.

[How]
Disable the reallow to ensure that we have enough of a gap between entry
and exit and we're not seeing back-to-back wake_and_executes.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/2aac387445610d6dfd681f5214388e86f5677ef7; https://git.kernel.org/stable/c/6226a5aa77370329e01ee8abe50a95e60618ce97; https://git.kernel.org/stable/c/2aac387445610d6dfd681f5214388e86f5677ef7
CVE: CVE-2024-36025
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()

The app_reply->elem[] array is allocated earlier in this function and it
has app_req.num_ports elements.  Thus this > comparison needs to be >= to
prevent memory corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-193
References: https://git.kernel.org/stable/c/4406e4176f47177f5e51b4cc7e6a7a2ff3dbfbbd; https://git.kernel.org/stable/c/60b87b5ecbe07d70897d35947b0bb3e76ccd1b3a; https://git.kernel.org/stable/c/8c820f7c8e9b46238d277c575392fe9930207aab
CVE: CVE-2024-36026
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11

While doing multiple S4 stress tests, GC/RLC/PMFW get into
an invalid state resulting into hard hangs.

Adding a GFX reset as workaround just before sending the
MP1_UNLOAD message avoids this failure.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1e3b8874d55c0c28378beb9007494a7a9269a5f5; https://git.kernel.org/stable/c/31729e8c21ecfd671458e02b6511eb68c2225113; https://git.kernel.org/stable/c/7521329e54931ede9e042bbf5f4f812b5bc4a01d
CVE: CVE-2024-3924
Published: 2024-05-30
Description: A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `autodocs.yml` workflow file. The vulnerability arises from the insecure handling of the `github.head_ref` user input, which is used to dynamically construct a command for installing a software package. An attacker can exploit this by forking the repository, creating a branch with a malicious payload as the name, and then opening a pull request to the base repository. Successful exploitation could lead to arbitrary code execution within the context of the GitHub Actions runner. This issue affects versions up to and including v2.0.0 and was fixed in version 2.0.0.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94
References: https://github.com/huggingface/text-generation-inference/commit/88702d876383f7200eccf67e28ba00500dc804bb; https://huntr.com/bounties/8af92fc2-0103-4d29-bb28-c3893154c422; https://github.com/huggingface/text-generation-inference/commit/88702d876383f7200eccf67e28ba00500dc804bb
CVE: CVE-2024-4330
Published: 2024-05-30
Description: A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6. The vulnerability arises due to improper handling of user-supplied input in the 'list_personalities' endpoint. By crafting a malicious HTTP request, an attacker can traverse the directory structure and view the contents of any folder, albeit limited to subfolder names only. This issue was demonstrated via a specific HTTP request that manipulated the 'category' parameter to access arbitrary directories. The vulnerability is present in the code located at the 'endpoints/lollms_advanced.py' file.
CVSS Score: 3.3 (LOW)
CWE: CWE-23
References: https://huntr.com/bounties/154a78d5-3960-4fc6-8666-f982b5e70ed7; https://huntr.com/bounties/154a78d5-3960-4fc6-8666-f982b5e70ed7
CVE: CVE-2024-5517
Published: 2024-05-30
Description: A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file changepwd.php. The manipulation of the argument useremail leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266588.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/ppp-src/ha/issues/4; https://vuldb.com/?ctiid.266588; https://vuldb.com/?id.266588
CVE: CVE-2023-52882
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change

While PLL CPUX clock rate change when CPU is running from it works in
vast majority of cases, now and then it causes instability. This leads
to system crashes and other undefined behaviour. After a lot of testing
(30+ hours) while also doing a lot of frequency switches, we can't
observe any instability issues anymore when doing reparenting to stable
clock like 24 MHz oscillator.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a; https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069; https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff
CVE: CVE-2024-32029
Published: 2024-05-30
Description: Rejected reason: This CVE is a duplicate of another CVE.
CVE: CVE-2024-35345
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts unidentified code within the file /classes/Users.php. Manipulating the argument id results in cross-site scripting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298533/vuln1-cross-site-scripting-xss; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298533/vuln1-cross-site-scripting-xss
CVE: CVE-2024-35354
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_category. Manipulating the argument id can result in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298670/vuln9-error-based-sql-injection; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298670/vuln9-error-based-sql-injection
CVE: CVE-2024-35355
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_category. Manipulating the argument id can result in SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298724/vuln10-blind-sql-injection-time-based; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298724/vuln10-blind-sql-injection-time-based
CVE: CVE-2024-35356
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=save_item. Manipulating the argument id can result in SQL injection.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298676/vuln11-error-based-sql-injection; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298676/vuln11-error-based-sql-injection
CVE: CVE-2024-35357
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=delete_item. Manipulating the argument id can result in SQL injection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298672/vuln12-error-based-sql-injection; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298672/vuln12-error-based-sql-injection
CVE: CVE-2024-35358
Published: 2024-05-30
Description: A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=view_category. Manipulating the argument id can result in SQL injection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://vuln.pentester.stream/pentester-vulnerability-research/post/2298731/vuln14-blind-sql-injection-time-based; https://vuln.pentester.stream/pentester-vulnerability-research/post/2298731/vuln14-blind-sql-injection-time-based
CVE: CVE-2024-35430
Published: 2024-05-30
Description: In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.
CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md; https://www.zkteco.com/en/Security_Bulletinsibs/16; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35430.md
CVE: CVE-2024-35432
Published: 2024-05-30
Description: ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting (XSS) via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35432.md; https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2024-35432.md
CVE: CVE-2024-36027
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer

Btrfs clears the content of an extent buffer marked as
EXTENT_BUFFER_ZONED_ZEROOUT before the bio submission. This mechanism is
introduced to prevent a write hole of an extent buffer, which is once
allocated, marked dirty, but turns out unnecessary and cleaned up within
one transaction operation.

Currently, btrfs_clear_buffer_dirty() marks the extent buffer as
EXTENT_BUFFER_ZONED_ZEROOUT, and skips the entry function. If this call
happens while the buffer is under IO (with the WRITEBACK flag set,
without the DIRTY flag), we can add the ZEROOUT flag and clear the
buffer's content just before a bio submission. As a result:

1) it can lead to adding faulty delayed reference item which leads to a
   FS corrupted (EUCLEAN) error, and

2) it writes out cleared tree node on disk

The former issue is previously discussed in [1]. The corruption happens
when it runs a delayed reference update. So, on-disk data is safe.

[1] https://lore.kernel.org/linux-btrfs/3f4f2a0ff1a6c[PII_REDACTED]88925bdcf3cd719e5[PII_REDACTED].git.naohiro.aota@wdc.com/

The latter one can reach on-disk data. But, as that node is already
processed by btrfs_clear_buffer_dirty(), that will be invalidated in the
next transaction commit anyway. So, the chance of hitting the corruption
is relatively small.

Anyway, we should skip flagging ZEROOUT on a non-DIRTY extent buffer, to
keep the content under IO intact.
CVSS Score: 7.1 (HIGH)
References: https://git.kernel.org/stable/c/[PII_REDACTED]0c0efd5a11e800b0525a01068c9457; https://git.kernel.org/stable/c/f4b994fccbb6f294c4b31a6ca0114b09f7245043; https://git.kernel.org/stable/c/[PII_REDACTED]0c0efd5a11e800b0525a01068c9457
CVE: CVE-2024-36029
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-msm: pervent access to suspended controller

Generic sdhci code registers LED device and uses host->runtime_suspended
flag to protect access to it. The sdhci-msm driver doesn't set this flag,
which causes a crash when LED is accessed while controller is runtime
suspended. Fix this by setting the flag correctly.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1200481cd6069d16ce20133bcd86f5825e26a045; https://git.kernel.org/stable/c/56b99a52229d7f8cd1f53d899f57aa7eb4b199af; https://git.kernel.org/stable/c/a957ea5aa3d3518067a1ba32c6127322ad348d20
CVE: CVE-2024-36030
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix the double free in rvu_npc_freemem()

Clang static checker(scan-build) warning：
drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c:line 2184, column 2
Attempt to free released memory.

npc_mcam_rsrcs_deinit() has released 'mcam->counters.bmap'. Deleted this
redundant kfree() to fix this double free problem.
CVSS Score: 7.1 (HIGH)
CWE: CWE-415
References: https://git.kernel.org/stable/c/6e965eba43e9724f3e603d7b7cc83e53b23d155e; https://git.kernel.org/stable/c/f5aa87a2c0a72132ffc793fb0a5375b2a65d520a; https://git.kernel.org/stable/c/6e965eba43e9724f3e603d7b7cc83e53b23d155e
CVE: CVE-2024-36031
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

keys: Fix overwrite of key expiration on instantiation

The expiry time of a key is unconditionally overwritten during
instantiation, defaulting to turn it permanent. This causes a problem
for DNS resolution as the expiration set by user-space is overwritten to
TIME64_MAX, disabling further DNS updates. Fix this by restoring the
condition that key_set_expiry is only called when the pre-parser sets a
specific expiry.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-324
References: https://git.kernel.org/stable/c/25777f3f4e1f371d16a594925f31e37ce07b6ec7; https://git.kernel.org/stable/c/939a08bcd4334bad4b201e60bd0ae1f278d71d41; https://git.kernel.org/stable/c/9da27fb65a14c18efd4473e2e82b76b53ba60252
CVE: CVE-2024-36032
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix info leak when fetching fw build id

Add the missing sanity checks and move the 255-byte build-id buffer off
the stack to avoid leaking stack data through debugfs in case the
build-info reply is malformed.
CVSS Score: 7.1 (HIGH)
CWE: CWE-668
References: https://git.kernel.org/stable/c/57062aa13e87b1a78a4a8f6cb5fab6ba24f5f488; https://git.kernel.org/stable/c/62d5550ab62042dcceaf18844d0feadbb962cffe; https://git.kernel.org/stable/c/6b63e0ef4d3ce0080395e5091fba2023f246c45a
CVE: CVE-2024-36033
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: fix info leak when fetching board id

Add the missing sanity check when fetching the board id to avoid leaking
slab data when later requesting the firmware.
CVSS Score: 7.1 (HIGH)
CWE: CWE-668
References: https://git.kernel.org/stable/c/0adcf6be1445ed50bfd4a451a7a782568f270197; https://git.kernel.org/stable/c/a3dff121a7f5104c4c2d47edaa2351837ef645dd; https://git.kernel.org/stable/c/ba307abed5e09759845c735ba036f8c12f55b209
CVE: CVE-2024-36880
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: qca: add missing firmware sanity checks

Add the missing sanity checks when parsing the firmware files before
downloading them to avoid accessing and corrupting memory beyond the
vmalloced buffer.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/02f05ed44b71152d5e11d29be28aed91c0489b4e; https://git.kernel.org/stable/c/1caceadfb50432dbf6d808796cb6c34ebb6d662c; https://git.kernel.org/stable/c/2e4edfa1e2bd821a317e7d006517dcf2f3fac68d
CVE: CVE-2024-36881
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

mm/userfaultfd: reset ptes when close() for wr-protected ones

Userfaultfd unregister includes a step to remove wr-protect bits from all
the relevant pgtable entries, but that only covered an explicit
UFFDIO_UNREGISTER ioctl, not a close() on the userfaultfd itself.  Cover
that too.  This fixes a WARN trace.

The only user visible side effect is the user can observe leftover
wr-protect bits even if the user close()ed on an userfaultfd when
releasing the last reference of it.  However hopefully that should be
harmless, and nothing bad should happen even if so.

This change is now more important after the recent page-table-check
patch we merged in mm-unstable (446dd9ad37d0 ("mm/page_table_check:
support userfault wr-protect entries")), as we'll do sanity check on
uffd-wp bits without vma context.  So it's better if we can 100%
guarantee no uffd-wp bit leftovers, to make sure each report will be
valid.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/377f3a9a3d032a52325a5b110379a25dd1ab1931; https://git.kernel.org/stable/c/8d8b68a5b0c9fb23d37df06bb273ead38fd5a29d; https://git.kernel.org/stable/c/c88033efe9a391e72ba6b5df4b01d6e628f4e734
CVE: CVE-2024-36882
Published: 2024-05-30
Description: In the Linux kernel, the following vulnerability has been resolved:

mm: use memalloc_nofs_save() in page_cache_ra_order()

See commit f2c817bed58d ("mm: use memalloc_nofs_save in readahead path"),
ensure that page_cache_ra_order() do not attempt to reclaim file-backed
pages too, or it leads to a deadlock, found issue when test ext4 large
folio.

 INFO: task DataXceiver for:7494 blocked for more than 120 seconds.
 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
 task:DataXceiver for state:D stack:0     pid:7494  ppid:1      flags:0x00000200
 Call trace:
  __switch_to+0x14c/0x240
  __schedule+0x82c/0xdd0
  schedule+0x58/0xf0
  io_schedule+0x24/0xa0
  __folio_lock+0x130/0x300
  migrate_pages_batch+0x378/0x918
  migrate_pages+0x350/0x700
  compact_zone+0x63c/0xb38
  compact_zone_order+0xc0/0x118
  try_to_compact_pages+0xb0/0x280
  __alloc_pages_direct_compact+0x98/0x248
  __alloc_pages+0x510/0x1110
  alloc_pages+0x9c/0x130
  folio_alloc+0x20/0x78
  filemap_alloc_folio+0x8c/0x1b0
  page_cache_ra_order+0x174/0x308
  ondemand_readahead+0x1c8/0x2b8
  page_cache_async_ra+0x68/0xb8
  filemap_readahead.isra.0+0x64/0xa8
  filemap_get_pages+0x3fc/0x5b0
  filemap_splice_read+0xf4/0x280
  ext4_file_splice_read+0x2c/0x48 [ext4]
  vfs_splice_read.part.0+0xa8/0x118
  splice_direct_to_actor+0xbc/0x288
  do_splice_direct+0x9c/0x108
  do_sendfile+0x328/0x468
  __arm64_sys_sendfile64+0x8c/0x148
  invoke_syscall+0x4c/0x118
  el0_svc_common.constprop.0+0xc8/0xf0
  do_el0_svc+0x24/0x38
  el0_svc+0x4c/0x1f8
  el0t_64_sync_handler+0xc0/0xc8
  el0t_64_sync+0x188/0x190
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/30153e4466647a17eebfced13eede5cbe4290e69; https://git.kernel.org/stable/c/468971c3f4b8187f25334503b68050a0e1370147; https://git.kernel.org/stable/c/7629ef6dda1564098aadeef38e5fbd11ee8627c4