huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2023-54040: kernel: Linux kernel: Denial of Service due to incorrect FDIR filter fallback logic
Component: kernel
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel. Incorrect fallback logic within the FDIR (Flow Director) filter handling of the 'ice' network driver can occur when adding a filter. A local attacker with low privileges could exploit this flaw, leading to a memory leak. This memory leak could eventually result in a Denial of Service (DoS) condition on the system.


Affected upstream versions: 5.13
Fixed upstream versions: 0, 5.15.107, 6.1.24, 6.2.11, 6.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 391d28c0e38c0e5b11a4240a2b4976cf63e87f45
CVE-2023-54048: kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction
Component: kernel
Severity: Moderate
CWE: CWE-366 (Race Condition within a Thread)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) bnxt_re driver. A local user could exploit a race condition that occurs when a Queue Pair (QP) is destroyed, but completion queue (CQ) polling continues. This can lead to a kernel panic, resulting in a Denial of Service (DoS) on the system.


Affected upstream versions: 4.11
Fixed upstream versions: 0, 5.15.124, 6.1.43, 6.4.8, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: b79a0e71d6e8692e0b6da05f8aaa7d69191cf7e7
CVE-2023-54052: kernel: Linux kernel Wi-Fi driver: Denial of Service due to missing transmit status
Component: kernel
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's Wi-Fi driver (mt76: mt7921). This issue, caused by missing transmit status in aggregated data units, can lead to a temporary network stoppage. A local attacker could exploit this vulnerability to cause a Denial of Service (DoS) by preventing network communication.


Affected upstream versions: 5.12
Fixed upstream versions: 0, 6.1.52, 6.4.15, 6.5.2, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 1cd102aaedb277fbe81dd08cd9f5cae951de2bff
CVE-2023-54053: kernel: Linux kernel: Denial of Service in iwlwifi due to NULL pointer dereference
Component: kernel
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local attacker with low privileges to cause a denial of service (DoS) by triggering a NULL pointer dereference. This occurs when the iwl_pci_probe() function fails and frees a transaction structure, but the iwl_pci_remove() function subsequently attempts to access the already freed memory, leading to a system crash.


Affected upstream versions: 5.4
Fixed upstream versions: 0, 5.10.181, 5.15.113, 5.4.244, 6.1.30, 6.3.4, 6.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: f6f2d16c77f936041b8ac495fceabded4ec6c83c
CVE-2023-54055: kernel: Linux kernel: Memory leak in RDMA/irdma subsystem leads to Denial of Service
Component: kernel
Severity: Moderate
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's RDMA/irdma subsystem. When the `irdma` module is unloaded, certain memory objects (PBLEs) are not properly released, leading to a memory leak. A local attacker could repeatedly trigger this condition, causing system memory to be exhausted and resulting in a Denial of Service (DoS).


Affected upstream versions: 5.14
Fixed upstream versions: 0, 5.15.108, 6.1.25, 6.2.12, 6.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 810250c9c6616fe131099c0e51c61f2110ed07bf
CVE-2023-54057: kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
Component: kernel
Severity: Low
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A stack buffer overflow vulnerability was found in the Linux kernel's AMD IOMMU driver. The parse_ivrs_acpihid() function uses sscanf() to parse the ivrs_acpihid kernel command-line parameter without specifying a field width limit. An overly long ACPI HID string can overflow the fixed-size acpiid buffer on the stack.

Statement: This flaw requires the ability to set kernel boot parameters, which typically requires root or physical access. The ivrs_acpihid parameter is used to manually specify ACPI device mappings for AMD IOMMU. Since kernel command-line parameters are controlled at boot time by privileged users, the attack surface is limited to scenarios where an attacker already has elevated access.

Affected upstream versions: 4.7
Fixed upstream versions: 0, 5.10.175, 5.15.103, 5.4.237, 6.1.16, 6.2.3, 6.3
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 5e97dc748d13fad582136ba0c8cec215c7aeeb17
CVE-2023-54062: kernel: ext4: fix invalid free tracking in ext4_xattr_move_to_block()
Component: kernel
Severity: Low
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A memory management flaw was found in the Linux kernel's ext4 filesystem extended attribute handling. In ext4_xattr_move_to_block(), when moving an extended attribute value to an external block, the code checks entry->e_value_inum to determine if the buffer was allocated via kvmalloc(). However, at cleanup time the xattr entry pointer is stale (already removed), leading to either calling kvfree() on an invalid pointer or leaking memory that should have been freed.

Statement: This flaw affects ext4 filesystems using extended attributes stored in external inodes. The invalid free tracking occurs when moving large xattr values to separate blocks. While this can cause memory corruption or leaks, exploiting it requires specific filesystem operations on ext4 with large extended attributes, limiting practical attack scenarios.

Affected upstream versions: 4.14.308 < 4.14.315, 4.19.276 < 4.19.283, 5.4.235 < 5.4.243, 5.10.173 < 5.10.180, 5.15.99 < 5.15.112, 6.1.16 < 6.1.29, 6.2.3 < 6.2.16, 6.3
Fixed upstream versions: 0, 4.14.315, 4.19.283, 5.10.180, 5.15.112, 5.4.243, 6.1.29, 6.2.16, 6.3.3, 6.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 76887be2a96193cd11be818551b8934ecdb3123f
CVE-2023-54064: kernel: Kernel: Memory leak in IPMI SSIF module leads to Denial of Service
Component: kernel
Severity: Low
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's Intelligent Platform Management Interface (IPMI) SSIF module. A local user can exploit this vulnerability by repeatedly calling the `ssif_info_find()` function. This improper handling of memory allocation leads to a memory leak, which can result in a Denial of Service (DoS) due to system resource exhaustion.


Affected upstream versions: 5.4
Fixed upstream versions: 0, 5.10.195, 5.15.132, 5.4.257, 6.1.53, 6.4.16, 6.5.3, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: de677f4379fa67f650e367c188a0f80bee9b6732
CVE-2023-54066: kernel: Linux kernel: Denial of Service in dvb-usb-v2 gl861 due to null-pointer dereference
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's dvb-usb-v2 gl861 module. A local user could exploit this null-pointer dereference vulnerability by providing specially crafted input to the gl861_i2c_master_xfer function. This could lead to a system crash, resulting in a Denial of Service (DoS).


Affected upstream versions: 5.5
Fixed upstream versions: 0, 5.10.197, 5.15.133, 6.1.55, 6.5.5, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 578b67614ae0e4fba3945b66a4c8f9ae77115bcb
CVE-2023-54069: kernel: ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
Component: kernel
Severity: Low
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

An integer overflow flaw was found in the Linux kernel's ext4 filesystem. In ext4_mb_new_inode_pa(), when calculating the end position of ext4_free_extent, the computation can overflow ext4_lblk_t (uint32) to zero. This occurs with large logical block numbers near UINT_MAX, causing a BUG_ON assertion failure and kernel crash during block allocation.

Statement: This flaw can be triggered through specific file operations involving large sparse files with fallocate. The reproducer requires creating files with extents near the maximum logical block number boundary. While the crash is deterministic once triggered, it requires specific filesystem operations with very large files.

Affected upstream versions: 5.4.244 < 5.4.260, 5.10.181 < 5.10.200, 5.15.113 < 5.15.138, 6.1.30 < 6.1.61, 4.14.316 < 4.15, 4.19.284 < 4.20, 6.3.4 < 6.4, 6.4
Fixed upstream versions: 0, 4.15, 4.20, 5.10.200, 5.15.138, 5.4.260, 6.1.61, 6.4, 6.5.5, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 83ecffd40c65844a73c2e93d7c841455786605ac
CVE-2023-54070: kernel: Linux kernel igb driver: Denial of Service due to improper SR-IOV cleanup
Component: kernel
Severity: Moderate
CWE: CWE-703 (Improper Check or Handling of Exceptional Conditions)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's `igb` driver. When the `igb` module is loaded with Single Root I/O Virtualization (SR-IOV) enabled on certain network adapters, and the SR-IOV initialization subsequently fails, the driver does not properly clean up allocated resources. A local user can exploit this improper cleanup by attempting to remove the `igb` module, which may cause the system to hang or crash, leading to a Denial of Service (DoS).


Affected upstream versions: 6.3
Fixed upstream versions: 0, 6.5.4, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 0e3ea7e82a06014b9baf1b84ba579c38cbff3558
CVE-2023-54071: kernel: wifi: rtw88: use work to update rate to avoid RCU warning
Component: kernel
Severity: Moderate
CWE: CWE-667 (Improper Locking)
CVSS v3: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was identified in the Linux kernel’s rtw88 Wi-Fi driver (drivers/net/wireless/realtek/rtw88) where the ieee80211_ops::sta_rc_update callback was invoked within a Read-Copy-Update (RCU) read-side critical section without proper atomicity or deferral. The ieee80211_chan_bw_change() function holds an RCU read lock while calling into drv_sta_rc_update(), and under these conditions, the driver could perform work that may trigger a voluntary context switch inside the RCU protection region. This improper synchronization can lead to unpredictable kernel behavior, including WARN messages, instability in wireless operations, and potential denial-of-service scenarios.


Affected upstream versions: 5.19
Fixed upstream versions: 0, 6.1.30, 6.3.4, 6.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 107677a8f43521e33e4a653e50fdf55ba622a4ce
CVE-2023-54072: kernel: Linux kernel: Denial of service or memory corruption due to a data race in ALSA PCM memory allocation
Component: kernel
Severity: Moderate
CWE: CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
CVSS v3: 6.3 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel. A data race in the Advanced Linux Sound Architecture (ALSA) Pulse-Code Modulation (PCM) memory allocation helpers allows a local user to bypass sanity checks. This can lead to the allocation of more memory than intended, potentially resulting in a denial of service (DoS) or other memory corruption issues.


Affected upstream versions: 5.6
Fixed upstream versions: 0, 5.10.193, 5.15.129, 6.1.39, 6.4.4, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 7e1d1456c8db9949459c5a24e8845cfe92430b0f
CVE-2023-54074: kernel: Linux kernel: Denial of Service in mlx5e due to incorrect encap attribute handling
Component: kernel
Severity: Moderate
CWE: CWE-704 (Incorrect Type Conversion or Cast)
CVSS v3: 3.6 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the mlx5e Traffic Control (TC) encapsulation logic in the net/mlx5e driver of the Linux kernel. The code responsible for invalidating encapsulation actions did not use the proper helper function to retrieve the correct encapsulation attribute, instead assuming the default attribute would suffice. When the post-action infrastructure was introduced, most users of the encap attribute were updated to call mlx5e_tc_get_encap_attr() to obtain the correct attribute; however, the invalidation path in mlx5e_invalidate_encap() was not updated accordingly. This could result in improper destruction of header modify actions and generate WARNINGS in the kernel log.


Affected upstream versions: 5.18
Fixed upstream versions: 0, 6.1.31, 6.3.5, 6.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 00959a1bad58e4b6c14a2729f84d354255073609
CVE-2023-54076: kernel: smb: client: fix missed ses refcounting
Component: kernel
Severity: Low
CWE: CWE-911 (Improper Update of Reference Count)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A use-after-free vulnerability was found in the Linux kernel's SMB client implementation. When handling SMB sessions with DFS (Distributed File System) root sessions, the code fails to properly increment the reference count for both the session and its dfs_root_ses. This can cause the dfs_root_ses to be freed prematurely in a subsequent cifs_put_smb_ses() call, leading to a use-after-free condition.

Statement: This flaw affects systems using the SMB/CIFS client with DFS referrals. The use-after-free can occur during session handling when DFS root sessions are involved. Exploitation requires mounting SMB shares with DFS enabled, which is common in enterprise environments with Windows file servers.

Affected upstream versions: 6.2.15 < 6.3, 6.3.2 < 6.4, 6.4
Fixed upstream versions: 0, 6.3, 6.4, 6.4.7, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: eb382196e6f6e05cfafdab797840e5a96c6e7bf0
CVE-2023-54083: kernel: phy: tegra: xusb: Clear the driver reference in usb-phy dev
Component: kernel
Severity: Low
CWE: CWE-825 (Expired Pointer Dereference)
CVSS v3: 3.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Public date: 2025-12-24T00:00:00+00:00

In the Linux kernel, the following vulnerability has been resolved:

phy: tegra: xusb: Clear the driver reference in usb-phy dev

For the dual-role port, it will assign the phy dev to usb-phy dev and
use the port dev driver as the dev driver of usb-phy.

When we try to destroy the port dev, it will destroy its dev driver
as well. But we did not remove the reference from usb-phy dev. This
might cause the use-after-free issue in KASAN.


Affected upstream versions: 5.7
Fixed upstream versions: 0, 5.10.188, 5.15.121, 6.1.39, 6.4.4, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: b6a107c52073496d2e5d2837915f59fb3103832f
CVE-2023-54089: kernel: virtio_pmem: add the missing REQ_OP_WRITE for flush bio
Component: kernel
Severity: Moderate
CWE: CWE-672 (Operation on a Resource after Expiration or Release)
CVSS v3: 6.2 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was discovered in the virtio_pmem driver in the Linux kernel, where flush block I/O requests did not have the required REQ_OP_WRITE operation code assigned before submission. Under workloads involving persistent memory block devices — for example, running mkfs.xfs on a pmem device,this omission can lead to bio submission warnings and improper block I/O handling.


Affected upstream versions: 6.3
Fixed upstream versions: 0, 6.4.16, 6.5.3, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: e39e870e1e683a71d3d2e63e661a5695f60931a7
CVE-2023-54090: kernel: ixgbe: Fix panic during XDP_TX with > 64 CPUs
Component: kernel
Severity: Low
CWE: CWE-1285 (Improper Validation of Specified Index, Position, or Offset in Input)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's ixgbe network driver. On systems with more than 64 CPUs, XDP_TX operations can cause a kernel panic due to an array-index-out-of-bounds access. The ixgbe_xdp_locking_key variable can be incorrectly decremented to zero during ring reconfiguration, causing the driver to use raw CPU numbers instead of CPU % 64 for XDP ring indexing, leading to NULL pointer dereference.

Statement: This flaw affects high-core-count systems (more than 64 CPUs) using Intel ixgbe network adapters with XDP programs. The panic can be triggered when loading XDP programs or when using ethtool --set-channels to reconfigure the interface. Servers with many cores using ixgbe NICs for XDP packet processing are at risk.

Affected upstream versions: 5.16
Fixed upstream versions: 0, 6.1.29, 6.2.16, 6.3.3, 6.4
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 1924450175349e64f8dfc3689efcb653dba0418e
CVE-2023-54091: kernel: Linux kernel: Denial of Service due to memory leak in drm_client_target_cloned function
Component: kernel
Severity: Low
CWE: CWE-772 (Missing Release of Resource after Effective Lifetime)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel. A local attacker could exploit a memory leak in the `drm_client_target_cloned` function, where `dmt_mode` is allocated but never freed. This memory leak could lead to a denial of service (DoS) by exhausting system resources.


Affected upstream versions: 2.6.35
Fixed upstream versions: 0, 4.14.322, 4.19.291, 5.10.188, 5.15.123, 5.4.251, 6.1.42, 6.4.7, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: d3009700f48602b557eade1f22c98b6bc20247e8
CVE-2023-54093: kernel: Linux kernel: Denial of Service in anysee media driver via null pointer dereference
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's anysee media driver. A local user can provide specially crafted input to the anysee_master_xfer function, leading to a null pointer dereference. This can cause a system crash, resulting in a Denial of Service (DoS).


Affected upstream versions: 2.6.27
Fixed upstream versions: 0, 4.14.326, 4.19.295, 5.10.197, 5.15.133, 5.4.257, 6.1.55, 6.5.5, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 73c0b224ceeba12dee2a7a8cbc147648da0b2e63
CVE-2023-54095: kernel: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
Component: kernel
Severity: Low
CWE: CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A slab-out-of-bounds read vulnerability was found in the Linux kernel's PowerPC IOMMU code. The fail_iommu_setup() function registers the same notifier_block structure to both PCI and VIO buses. Since notifier_block is a linked list node, this causes notifiers registered to one bus type to also apply to the other. The VGA arbiter code then incorrectly processes VIO devices as PCI devices, causing an out-of-bounds memory access.

Statement: This flaw affects only PowerPC systems with both PCI and VIO buses, typically IBM POWER servers running with IOMMU fail injection enabled. The out-of-bounds read occurs during device registration at boot time. Most PowerPC systems in production do not enable fail_iommu, limiting the practical impact.

Affected upstream versions: 3.6
Fixed upstream versions: 0, 4.14.326, 4.19.295, 5.10.195, 5.15.132, 5.4.257, 6.1.53, 6.4.16, 6.5.3, 6.6
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: dc0d107e624ca96aef6dd8722eb33ba3a6d157b0
CVE-2023-54096: kernel: Linux kernel (soundwire): Memory corruption due to incorrect device enumeration completion
Component: kernel
Severity: Moderate
CWE: CWE-820 (Missing Synchronization)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's soundwire subsystem. The code responsible for managing device enumeration completion, which allows drivers to synchronize with soundwire devices, contains a defect. This issue can lead to memory corruption if drivers are still waiting for completion, as the system fails to signal all processes and uses an incorrect reinitialization function.


Affected upstream versions: 5.7
Fixed upstream versions: 0, 5.10.190, 5.15.126, 6.1.43, 6.4.8, 6.5
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: 48d1d0ce0782f995fda678508fdae35c5e9593f0
CVE-2023-54098: kernel: Kernel: NULL pointer dereference in Intel GVT-g debugfs during device removal
Component: kernel
Severity: Low
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Public date: 2025-12-24T00:00:00+00:00

A flaw was found in the Linux kernel's Intel GVT-g (Graphics Virtualization Technology) debugfs component. When a device is removed through unbinding, the `intel_gvt_debugfs_clean()` function may attempt to access a debugfs root that has already been deallocated, leading to a NULL pointer dereference. A local attacker could exploit this vulnerability to cause a kernel crash, resulting in a Denial of Service (DoS).


Affected upstream versions: 4.16
Fixed upstream versions: 0, 5.10.163, 5.15.87, 6.0.19, 6.1.5, 6.2
Upstream repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Upstream fix commit: bb7c7b2c89d2feb347b6f9bffc1c75987adb1048