huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2023-52458: kernel: block: null pointer dereference in ioctl.c when length and logical block size are misaligned
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.2 (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)
Public date: 2024-02-23T00:00:00+00:00

A flaw was found in the Linux kernel's block subsystem, where a NULL pointer dereference occurs if partitions are created or resized with a size that is not a multiple of the logical block size. This flaw allows a privileged attacker to cause a denial of service.

Statement: The impact of this vulnerability is considered Low because the affected code requires system administration privileges to exploit.

Affected upstream versions: 4.10
Fixed upstream versions: 0, 5.10.215, 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 8f6dfa1f1efe6dcca2d43e575491d8fcbe922f62
CVE-2023-52462: kernel: bpf: fix check for attempt to corrupt spilled pointer
Component: kernel
Severity: Low
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Public date: 2024-02-23T00:00:00+00:00

A flaw was found in the Linux kernel. When the register is spilled onto a stack as a 1/2/4-byte register, the slot_type[BPF_REG_SIZE - 1]  is set, possibly including a few more below it, depending on the actual spill size. To confirm if some stack slots have a spilled register, consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, use the is_spilled_reg() helper.


Affected upstream versions: 5.10.163 < 5.10.209, 5.15.86 < 5.15.148, 5.16
Fixed upstream versions: 0, 5.10.209, 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 2757f17972d87773b3677777f5682510f13c66ef
CVE-2023-52463: kernel: efivarfs: force RO when remounting if SetVariable is not supported
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-23T00:00:00+00:00

A flaw was found in the Linux kernel, which involves the improper handling of the efivarfs filesystem when the firmware does not support the SetVariable function at runtime. Specifically, even if efivarfs is initially mounted as read-only (RO), it can be remounted as read-write (RW) without checking if the firmware can handle variable updates. This issue allows operations such as efi-updatevar to be executed, which leads to a crash due to a NULL pointer dereference. This crash occurs because the callback for SetVariable is not assigned, causing a level 0 translation fault.

Statement: This vulnerability is classified as Moderate severity because it requires specific conditions to be exploited: the system must be using a firmware that does not support the SetVariable function at runtime, and an attacker must have the ability to remount the efivarfs filesystem with read-write permissions. While it does not provide direct unauthorized access or code execution, the resulting crash from a NULL pointer dereference can cause denial of service, disrupting normal system operations. The impact is limited to systems with the specified firmware and does not affect systems where the SetVariable function is properly supported, reducing the overall exposure and potential damage.

Affected upstream versions: 5.7.11 < 5.8, 5.8
Fixed upstream versions: 0, 5.10.209, 5.15.148, 5.8, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 94c742324ed7e42c5bd6a9ed22e4ec6d764db4d8
CVE-2023-52464: kernel: EDAC/thunderx: Incorrect buffer size in drivers/edac/thunderx_edac.c
Component: kernel
Severity: Low
CWE: CWE-805 (Buffer Access with Incorrect Length Value)
CVSS v3: 2.9 (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L)
Public date: 2024-02-23T00:00:00+00:00

A flaw was found in the Linux Kernel. An improper buffer size is provided to the strncat function, which may result in an out-of-bounds write, leading to memory corruption or a denial of service.

Statement: Because the functions in question pass as arguments static strings with a known size, none of which exceed the size of the allocated buffer, this flaw is not known to be exploitable under any supported scenario.

Affected upstream versions: 4.12
Fixed upstream versions: 0, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 71c17ee02538802ceafc830f0736aa35b564e601
CVE-2023-52467: kernel: null pointer dereference in of_syscon_register()
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-26T00:00:00+00:00

A vulnerability was found in the Linux kernel, where A NULL pointer dereference flaw may occur in _syscon_register(). In this issue, kasprintf() returns a pointer to dynamically allocated memory, which can be NULL upon failure.


Affected upstream versions: 5.9
Fixed upstream versions: 0, 5.10.209, 5.15.148, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 927626a2073887ee30ba00633260d4d203f8e875
CVE-2023-52469: kernel: use-after-free in kv_parse_power_table
Component: kernel
Severity: Moderate
CWE: CWE-416 (Use After Free)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-26T00:00:00+00:00

A use-after-free flaw was found in kv_parse_power_table in drivers/amd/pm in the Linux kernel. When ps equals NULL, kv_parse_power_table frees adev->pm.dpm.ps. The adev->pm.dpm.ps is used in the loop of kv_dpm_fini after its first free in kv_parse_power_table, causing a use-after-free problem.


Affected upstream versions: 4.2
Fixed upstream versions: 0, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e
CVE-2023-52470: kernel: null-ptr-deref in alloc_workqueue
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-26T00:00:00+00:00

A NULL pointer dereference flaw was found in alloc_workqueue in the Linux Kernel. Check the alloc_workqueue return value in radeon_crtc_init() to avoid null-ptr-deref.


Affected upstream versions: 3.16
Fixed upstream versions: 0, 4.19.306, 5.10.209, 5.15.148, 5.4.268, 6.1.75, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 21b1645660717d6126dd4866c850fcc5c4703a41
CVE-2023-52471: kernel: null pointer dereference issues in ice_ptp.c
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 2.3 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)
Public date: 2024-02-26T00:00:00+00:00

A null pointer dereference problem was found in ice_ptp.c in ice in the Linux Kernel. This issue occurs when devm_kasprintf() returns a pointer to dynamically allocated memory, which can be NULL upon failure.


Affected upstream versions: 6.7
Fixed upstream versions: 0, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3cd9b9bee33f39f6c6d52360fe381b89a7b12695
CVE-2023-52473: kernel: NULL pointer dereference in zone registration error path
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 2.3 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L)
Public date: 2024-02-26T00:00:00+00:00

is a security vulnerability in the Linux kernel, specifically within the thermal management subsystem. This vulnerability is a NULL pointer dereference that occurs in the thermal_zone_device_register_with_trips() function during the thermal zone registration error path. This issue can cause crashes and system instability.


Affected upstream versions: 6.4
Fixed upstream versions: 0, 6.6.14, 6.7.2, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 335176dd8ebaca6493807dceea33c478305667fa
CVE-2023-52475: kernel: use-after-free in powermate_config_complete
Component: kernel
Severity: Low
CWE: CWE-416 (Use After Free)
CVSS v3: 6.1 (CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-02-29T00:00:00+00:00

A use-after-free flaw was found in powermate_config_complete in drivers/input/misc/powermate.c in the Linux kernel. This issue may allow an attacker to crash the system at device disconnect, possibly leading to a kernel information leak problem.


Affected upstream versions: 2.6.12
Fixed upstream versions: 0, 4.14.328, 4.19.297, 5.10.199, 5.15.136, 5.4.259, 6.1.59, 6.5.8, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 8677575c4f39d65bf0d719b5d20e8042e550ccb9
CVE-2023-52476: kernel: perf/x86/lbr: Filter vsyscall addresses
Component: kernel
Severity: Low
CWE: CWE-404 (Improper Resource Shutdown or Release)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

perf/x86/lbr: Filter vsyscall addresses

We found that a panic can occur when a vsyscall is made while LBR sampling
is active. If the vsyscall is interrupted (NMI) for perf sampling, this
call sequence can occur (most recent at top):

    __insn_get_emulate_prefix()
    insn_get_emulate_prefix()
    insn_get_prefixes()
    insn_get_opcode()
    decode_branch_type()
    get_branch_type()
    intel_pmu_lbr_filter()
    intel_pmu_handle_irq()
    perf_event_nmi_handler()

Within __insn_get_emulate_prefix() at frame 0, a macro is called:

    peek_nbyte_next(insn_byte_t, insn, i)

Within this macro, this dereference occurs:

    (insn)->next_byte

Inspecting registers at this point, the value of the next_byte field is the
address of the vsyscall made, for example the location of the vsyscall
version of gettimeofday() at 0xffffffffff600000. The access to an address
in the vsyscall region will trigger an oops due to an unhandled page fault.

To fix the bug, filtering for vsyscalls can be done when
determining the branch type. This patch will return
a "none" branch if a kernel address if found to lie in the
vsyscall region.


Affected upstream versions: 5.16
Fixed upstream versions: 0, 6.1.59, 6.5.8, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3863989497652488a50f00e96de4331e5efabc6c
CVE-2023-52477: kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

usb: hub: Guard against accesses to uninitialized BOS descriptors

Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h
access fields inside udev->bos without checking if it was allocated and
initialized. If usb_get_bos_descriptor() fails for whatever
reason, udev->bos will be NULL and those accesses will result in a
crash:

BUG: kernel NULL pointer dereference, address: 0000000000000018
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP NOPTI
CPU: 5 PID: 17818 Comm: kworker/5:1 Tainted: G W 5.15.108-18910-gab0e1cb584e1 #1 <HASH:1f9e 1>
Hardware name: Google Kindred/Kindred, BIOS Google_Kindred.12672.413.0 02/03/2021
Workqueue: usb_hub_wq hub_event
RIP: 0010:hub_port_reset+0x193/0x788
Code: 89 f7 e8 20 f7 15 00 48 8b 43 08 80 b8 96 03 00 00 03 75 36 0f b7 88 92 03 00 00 81 f9 10 03 00 00 72 27 48 8b 80 a8 03 00 00 <48> 83 78 18 00 74 19 48 89 df 48 8b 75 b0 ba 02 00 00 00 4c 89 e9
RSP: 0018:ffffab740c53fcf8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffa1bc5f678000 RCX: 0000000000000310
RDX: fffffffffffffdff RSI: 0000000000000286 RDI: ffffa1be9655b840
RBP: ffffab740c53fd70 R08: 00001b7d5edaa20c R09: ffffffffb005e060
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
R13: ffffab740c53fd3e R14: 0000000000000032 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffffa1be96540000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000018 CR3: 000000022e80c005 CR4: 00000000003706e0
Call Trace:
hub_event+0x73f/0x156e
? hub_activate+0x5b7/0x68f
process_one_work+0x1a2/0x487
worker_thread+0x11a/0x288
kthread+0x13a/0x152
? process_one_work+0x487/0x487
? kthread_associate_blkcg+0x70/0x70
ret_from_fork+0x1f/0x30

Fall back to a default behavior if the BOS descriptor isn't accessible
and skip all the functionalities that depend on it: LPM support checks,
Super Speed capabilitiy checks, U1/U2 states setup.


Affected upstream versions: 4.6
Fixed upstream versions: 0, 4.14.328, 4.19.297, 5.10.199, 5.15.136, 5.4.259, 6.1.59, 6.5.8, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: c64e4dca9aefd232b17ac4c779b608b286654e81
CVE-2023-52478: kernel: HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
Component: kernel
Severity: Low
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 6 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

A flaw was found in the Linux kernel. This issue can cause a potential crash on the receiver USB disconnect.


Affected upstream versions: 3.19
Fixed upstream versions: 0, 4.14.328, 4.19.297, 5.10.199, 5.15.136, 5.4.259, 6.1.59, 6.5.8, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: ca0c4cc1d215dc22ab0e738c9f017c650f3183f5
CVE-2023-52482: kernel: x86/srso: Add SRSO mitigation for Hygon processors
Component: kernel
Severity: Moderate
CWE: CWE-562 (Return of Stack Variable Address)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2024-02-29T00:00:00+00:00

A vulnerability was found in the Linux kernel, where the Hygon x86 processor is susceptible to a speculative return stack overflow.

Statement: This kernel vulnerability will not be addressed, as Hygon is not a x86 processor variant that Red Hat officially supports.

Affected upstream versions: 4.20
Fixed upstream versions: 0, 5.10.215, 5.15.134, 6.1.56, 6.5.6, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e7ea043bc3f19473561c08565047b3f1671bf35d
CVE-2023-52486: kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling
Component: kernel
Severity: Moderate
CWE: CWE-833 (Deadlock)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

A flaw was found in the Linux kernel. A frame buffer can be freed while still in use in a specific situation in drivers/gpu/drm/drm_plane.c. This issue may compromise the availability.


Affected upstream versions: 4.12
Fixed upstream versions: 0, 4.19.307, 5.10.210, 5.15.149, 5.4.269, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 376e21a9e4c2c63ee5d8d3aa74be5082c3882229
CVE-2023-52489: kernel: mm/sparsemem: fix race in accessing memory_section->usage
Component: kernel
Severity: Moderate
CWE: CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

A race condition was found on a PFN in the Linux Kernel, which can fall into the device memory region with the system memory configuration. Normal zone start and end PFNs contain the device memory PFNs as well, and the compaction triggered will try on the device memory PFNs and end up in NOP. This may lead to compromised Availability.


Affected upstream versions: 5.3
Fixed upstream versions: 0, 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 90ad17575d26874287271127d43ef3c2af876cea
CVE-2023-52490: kernel: mm: migrate: fix getting incorrect page mapping during page migration
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

A page mapping vulnerability was found in the Linux kernel. A call to the page_mapping() function during a page migration may return an incorrect file mapping and cause a system crash if another thread is simultaneously attempting to offline the target page that is being migrated.

Statement: Red Hat Enterprise Linux 8 is not impacted by this vulnerability.

Affected upstream versions: 6.1.116 < 6.2, 6.3
Fixed upstream versions: 0, 6.2, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 9128bfbc5c80d8f4874dd0a0424d1f5fb010df1b
CVE-2023-52492: kernel: dmaengine: fix NULL pointer in channel unregistration function
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: fix NULL pointer in channel unregistration function

The Linux kernel CVE team has assigned CVE-2023-52492 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/20240229155245.1571576-33-lee@kernel.org/T


Affected upstream versions: 5.6
Fixed upstream versions: 0, 5.10.210, 5.15.149, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 9de69732dde4e443c1c7f89acbbed2c45a6a8e17
CVE-2023-52498: kernel: PM: sleep: Fix possible deadlocks in core system-wide PM code
Component: kernel
Severity: Low
CWE: CWE-833 (Deadlock)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-02-29T00:00:00+00:00

A flaw was found in the Linux Kernel. In low-memory situations, there is a possibility of a code deadlock that may lead to a hang.


Affected upstream versions: 4.14.171 < 4.15, 4.19.103 < 4.20, 5.4.19 < 5.5, 5.5.3 < 5.6, 5.6
Fixed upstream versions: 0, 4.15, 4.20, 5.10.210, 5.15.149, 5.5, 5.6, 6.1.76, 6.6.15, 6.7.3, 6.8
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f46eb832389f162ad13cb780d0b8cde93641990d
CVE-2023-52501: kernel: ring-buffer: Do not attempt to read past "commit"
Component: kernel
Severity: Low
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Do not attempt to read past &#34;commit&#34;

The Linux kernel CVE team has assigned CVE-2023-52501 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024030248-CVE-2023-52501-75ba@gregkh/T/#u


Affected upstream versions: 5.7
Fixed upstream versions: 0, 5.10.198, 5.15.134, 6.1.56, 6.5.6, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: cee5151c5410e868826b8afecfb356f3799ebea3
CVE-2023-52513: kernel: RDMA/siw: Fix connection failure handling
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

A NULL dereference vulnerability was found in the Linux kernel, which is caused when the siw_cm_work_handler() function attempts to dereference a NULL listener that may be created when immediate MPA request processing fails and the newly created endpoint unlinks the listening endpoint ready to be dropped.


Affected upstream versions: 5.3
Fixed upstream versions: 0, 5.10.198, 5.15.135, 5.4.258, 6.1.57, 6.5.7, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 6e26812e289b374c17677d238164a5a8f5770594
CVE-2023-52518: kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs
Component: kernel
Severity: Moderate
CWE: CWE-402 (Transmission of Private Resources into a New Sphere ('Resource Leak'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

A memory leak flaw was found in the Linux kernel’s Bluetooth functionality. This flaw allows a local user to crash the system.

Statement: This issue is fixed for Red Hat Enterprise Linux 8 starting from version 8.3.

Affected upstream versions: 5.16
Fixed upstream versions: 0, 6.1.57, 6.5.7, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 626535077ba9dc110787540d1fe24881094c15a1
CVE-2023-52520: kernel: platform/x86: think-lmi: Fix reference leak
Component: kernel
Severity: Low
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: think-lmi: Fix reference leak

The Linux kernel CVE team has assigned CVE-2023-52520 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024030252-CVE-2023-52520-0a4e@gregkh/T/#u


Affected upstream versions: 5.14
Fixed upstream versions: 0, 5.15.136, 6.1.59, 6.5.8, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 124cf0ea4b82e1444ec8c7420af4e7db5558c293
CVE-2023-52522: kernel: net: fix possible store tearing in neigh_periodic_work()
Component: kernel
Severity: Moderate
CWE: CWE-20 (Improper Input Validation)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

A flaw was found in the Linux kernel that allows for potential store tearing within the neigh_periodic_work() function, meaning a write operation on a value is not protected properly and could result in inconsistencies if another process or thread reads from that value before the operation is complete.


Affected upstream versions: 2.6.37
Fixed upstream versions: 0, 5.10.198, 5.15.135, 5.4.258, 6.1.57, 6.5.7, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 95eabb075a5902f4c0834ab1fb12dc35730c05af
CVE-2023-52528: kernel: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
Component: kernel
Severity: Low
CWE: CWE-252 (Unchecked Return Value)
CVSS v3: 4.4 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

The Linux kernel CVE team has assigned CVE-2023-52528 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024030254-CVE-2023-52528-c33b@gregkh/T/#u


Affected upstream versions: 2.6.34
Fixed upstream versions: 0, 4.14.327, 4.19.296, 5.10.198, 5.15.135, 5.4.258, 6.1.57, 6.5.7, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 3e0af6eec1789fd11934164a7f4dbcad979855a4
CVE-2023-52529: kernel: HID: sony: Fix a potential memory leak in sony_probe()
Component: kernel
Severity: Low
CWE: CWE-402 (Transmission of Private Resources into a New Sphere ('Resource Leak'))
CVSS v3: 6 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Public date: 2024-03-02T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

HID: sony: Fix a potential memory leak in sony_probe()

If an error occurs after a successful usb_alloc_urb() call, usb_free_urb()
should be called.


Affected upstream versions: 5.12.17 < 5.13, 5.13.2 < 5.14, 5.14
Fixed upstream versions: 0, 5.13, 5.14, 5.15.135, 6.1.57, 6.5.7, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bb0707fde7492121917fd9ddb43829e96ec0bb9e