Vulnerability-Lookup

RHSA-2025:13135

Vulnerability from csaf_redhat - Published: 2025-08-06 08:01 - Updated: 2026-11-11 05:57

Summary

Red Hat Security Advisory: kernel security update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: powerpc: Fix access beyond end of drmem array (CVE-2023-52451) * kernel: xhci: handle isoc Babble and Buffer Overrun events properly (CVE-2024-26659) * kernel: usb: xhci: Add error handling in xhci_map_urb_for_dma (CVE-2024-26964) * kernel: USB: core: Fix deadlock in usb_deauthorize_interface() (CVE-2024-26934) * kernel: USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (CVE-2024-27059) * kernel: powerpc/pseries: Fix potential memleak in papr_get_attr() (CVE-2022-48669) * kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (CVE-2023-52877) * kernel: media: gspca: cpia1: shift-out-of-bounds in set_flicker (CVE-2023-52764) * kernel: serial: core: fix transmit-buffer reset and memleak (CVE-2021-47527) * kernel: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (CVE-2024-36945) * kernel: mm: list_lru: fix UAF for memory cgroup (CVE-2024-43888) * kernel: um: Fix out-of-bounds read in LDT setup (CVE-2022-49395) * kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002) * kernel: padata: fix UAF in padata_reorder (CVE-2025-21727) * kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980) * kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CVE-2025-21928) * kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) * kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788) * kernel: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CVE-2025-37890) * kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958) * kernel: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CVE-2025-38052) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-47527

In the Linux kernel, the following vulnerability has been resolved: serial: core: fix transmit-buffer reset and memleak Commit 761ed4a94582 ("tty: serial_core: convert uart_close to use tty_port_close") converted serial core to use tty_port_close() but failed to notice that the transmit buffer still needs to be freed on final close. Not freeing the transmit buffer means that the buffer is no longer cleared on next open so that any ioctl() waiting for the buffer to drain might wait indefinitely (e.g. on termios changes) or that stale data can end up being transmitted in case tx is restarted. Furthermore, the buffer of any port that has been opened would leak on driver unbind. Note that the port lock is held when clearing the buffer pointer due to the ldisc race worked around by commit a5ba1d95e46e ("uart: fix race between uart_put_char() and uart_shutdown()"). Also note that the tty-port shutdown() callback is not called for console ports so it is not strictly necessary to free the buffer page after releasing the lock (cf. d72402145ace ("tty/serial: do not free trasnmit buffer page under port lock")).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 279 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-debug-devel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-debug-devel-matched-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-devel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-64k-devel-matched-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debug-devel-matched-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-matched-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-matched-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-matched-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-devel-matched-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-doc-0:5.14.0-427.81.1.el9_4.noarch	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-zfcpdump-devel-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:kernel-zfcpdump-devel-matched-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rtla-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rtla-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rtla-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rtla-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rv-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rv-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rv-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.EUS:rv-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-0:7.3.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-0:7.3.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-0:7.3.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.81.1.el9_4.src	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-modules-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-modules-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debug-modules-extra-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-modules-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-modules-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-64k-modules-extra-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-abi-stablelists-0:5.14.0-427.81.1.el9_4.noarch	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-core-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-core-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debug-uki-virt-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-core-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-core-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-extra-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-extra-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-extra-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-libs-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-libs-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-tools-libs-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-uki-virt-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-modules-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-modules-core-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:kernel-zfcpdump-modules-extra-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: BaseOS-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-64k-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-64k-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-common-aarch64-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-common-ppc64le-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-common-s390x-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-tools-libs-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:kernel-zfcpdump-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-kvm-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debug-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-kvm-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-rt-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: NFV-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:bpftool-debuginfo-0:7.3.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-debuginfo-common-x86_64-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debug-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-devel-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-modules-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-modules-core-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-rt-modules-extra-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:kernel-tools-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:libperf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: RT-9.4.0.Z.EUS:python3-perf-debuginfo-0:5.14.0-427.81.1.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2022-48669

A flaw was found in the Linux kernel. A potential memleak in papr_get_attr() may lead to compromised availability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2022-49395

A vulnerability was found in the Linux kernel's user mode (um) subsystem, specifically within the Local Descriptor Table (LDT) setup functionality. The issue arises from the syscall_stub_data() function misinterpreting the data_count parameter as a byte count rather than a count of longs, leading to an out-of-bounds read. This flaw could expose sensitive kernel memory and cause system instability.

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2022-49788

A flaw was found in the Linux kernel's VMware Virtual Machine Communication Interface (VMCI) driver. Memory structures allocated for queue pair event notifications contain uninitialized padding bytes that are copied directly to user space. A local attacker with access to the VMCI device can exploit this flaw to leak sensitive information from kernel memory.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2023-52451

A flaw was found in the Linux kernel, specifically affecting the PowerPC architecture's pseries memory hotplug functionality. The issue arises from the dlpar_memory_remove_by_index() function, which may access memory beyond the bounds of the drmem logical memory block (LMB) array when it fails to find a matching entry for a given Dynamic Reconfiguration Connector (DRC) index. This out-of-bounds access can lead to unintended behavior, including potential system crashes or exposure of sensitive information.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2023-52764

In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in set_flicker Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2023-52877

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Add a check for port->partner to avoid dereferencing a NULL pointer.

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-26659

A flaw was found in the Linux kernel related to the Extensible Host Controller Interface (xHCI) subsystem, specifically how it handles certain events. The issue arises when the xHCI driver improperly handles isochronous (isoc) Babble and Buffer Overrun events. The vulnerability occurs because the xHCI driver incorrectly assumes that the xHC (host controller) has released its ownership of a multi-TRB (Transfer Request Block) TD (Transfer Descriptor) after reporting an error on an early TRB. This assumption leads to the premature release of the TD, allowing remaining TRBs to be freed or overwritten, which can cause system instability or crashes.

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-26934

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() The Linux kernel CVE team has assigned CVE-2024-26934 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050123-CVE-2024-26934-e2fc@gregkh/T

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-833 - Deadlock

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-26964

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma The Linux kernel CVE team has assigned CVE-2024-26964 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050130-CVE-2024-26964-54c8@gregkh/T

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-27059

A flaw was found in the Linux kernel's USB storage driver. When processing identification data for ISD200 devices, the driver does not verify that reported sector and head counts are greater than zero before performing division operations. A local attacker who connects a specially crafted or emulated USB storage device can trigger a divide-by-zero error, causing a kernel crash and resulting in a Denial of Service (DoS).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-369 - Divide By Zero

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-36945

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix neighbour and rtable leak in smc_ib_find_route() In smc_ib_find_route(), the neighbour found by neigh_lookup() and rtable resolved by ip_route_output_flow() are not released or put before return. It may cause the refcount leak, so fix it.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Low

CVE-2024-43888

A possible use-after-free was found in the Linux kernel in mm/list_lru.c.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2024-57980

A flaw was found in the Linux kernel's USB Video Class (UVC) driver. When memory allocation fails during device status initialization, an error-handling routine releases the same memory twice due to an uncleared pointer. A local user could trigger this vulnerability to cause memory corruption and a Denial of Service (DoS) via a kernel crash.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-415 - Double Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2024-58002

A dangling pointer vulnerability was found in the Linux kernel. When an async control is written, a copy of a pointer is made in the file handle that started the operation. If the user closes that file descriptor, its structure will be freed and there will be one dangling pointer per pending async control that the driver will try to use, leading to denial of service of the system.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-21727

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the `padata_reorder()` function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure (`pd`) is decremented in one thread, freeing it, while another thread still holds a pointer to it and attempts to access it via `padata_find_next()`. This vulnerability can lead to system instability, denial of service, and potential privilege escalation.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-820 - Missing Synchronization

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-21928

A flaw was found in the Linux kernel's Intel Integrated Sensor Hub (ISH) driver. Improper memory management during driver removal causes device data to be freed prematurely while hardware cleanup operations are still in progress, leading to a use-after-free condition. A local user with administrative privileges to unload kernel drivers can trigger this flaw, causing a system crash and resulting in a Denial of Service (DoS).

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-21991

A flaw was found in the Linux kernel's AMD processor microcode loader. On systems equipped with memory-only or CPU-less Non-Uniform Memory Access (NUMA) nodes, the kernel fails to verify that a node contains active processors before querying per-processor data during microcode loading. A local privileged user could trigger this vulnerability when applying a microcode update, leading to an out-of-bounds array access that may cause memory corruption or a Denial of Service (DoS) through a system crash.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-37890

A use-after-free vulnerability has been identified in the Linux kernel's HFSC (Hierarchical Fair Service Curve) queuing discipline when it is configured with NETEM (Network Emulation) as a child. This flaw can lead to a kernel panic or crash due to incorrect assumptions about the queue state. Exploitation of this vulnerability requires local access with CAP_NET_ADMIN privileges and control over the qdisc (queueing discipline) setup. A local attacker could leverage this flaw to achieve denial of service or escalate privileges. Given that it affects kernel memory structures, successful exploitation could result in memory corruption, data leaks, or arbitrary write capabilities, leading to a full kernel crash.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-37958

A flaw was found in the Linux kernel. A local user can cause a denial of service (DoS) by performing concurrent memory operations during Transparent Huge Page (THP) migration and page splitting. Under specific race conditions, the kernel dereferences an invalid memory address, resulting in a system crash.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

CVE-2025-38052

A vulnerability was found in the Linux kernel's management of network namespaces. By manipulating the lifecycle of network namespaces, an attacker could exploit this vulnerability to cause a system crash or leak sensitive system memory. Exploitation of this vulnerability requires that a user has access to the system and the ability to create or destroy network namespaces. This typically requires administrative privileges, but could be exposed to an unprivileged user who has control over container lifecycles or a user who has administrative privileges within a container.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 279 products, the same list as for CVE-2021-47527

Threats

Impact Moderate

References

130 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:13135	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2265650	external
https://bugzilla.redhat.com/show_bug.cgi?id=2272780	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278169	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278237	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278398	external
https://bugzilla.redhat.com/show_bug.cgi?id=2278537	external
https://bugzilla.redhat.com/show_bug.cgi?id=2282712	external
https://bugzilla.redhat.com/show_bug.cgi?id=2282780	external
https://bugzilla.redhat.com/show_bug.cgi?id=2283424	external
https://bugzilla.redhat.com/show_bug.cgi?id=2284465	external
https://bugzilla.redhat.com/show_bug.cgi?id=2307861	external
https://bugzilla.redhat.com/show_bug.cgi?id=2347899	external
https://bugzilla.redhat.com/show_bug.cgi?id=2348513	external
https://bugzilla.redhat.com/show_bug.cgi?id=2348516	external
https://bugzilla.redhat.com/show_bug.cgi?id=2348599	external
https://bugzilla.redhat.com/show_bug.cgi?id=2356592	external
https://bugzilla.redhat.com/show_bug.cgi?id=2356917	external
https://bugzilla.redhat.com/show_bug.cgi?id=2363378	external
https://bugzilla.redhat.com/show_bug.cgi?id=2366848	external
https://bugzilla.redhat.com/show_bug.cgi?id=2367572	external
https://bugzilla.redhat.com/show_bug.cgi?id=2373380	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-47527	self
https://bugzilla.redhat.com/show_bug.cgi?id=2283424	external
https://www.cve.org/CVERecord?id=CVE-2021-47527	external
https://nvd.nist.gov/vuln/detail/CVE-2021-47527	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2022-48669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278537	external
https://www.cve.org/CVERecord?id=CVE-2022-48669	external
https://nvd.nist.gov/vuln/detail/CVE-2022-48669	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2022-49395	self
https://bugzilla.redhat.com/show_bug.cgi?id=2347899	external
https://www.cve.org/CVERecord?id=CVE-2022-49395	external
https://nvd.nist.gov/vuln/detail/CVE-2022-49395	external
https://lore.kernel.org/linux-cve-announce/202502…	external
https://access.redhat.com/security/cve/CVE-2022-49788	self
https://bugzilla.redhat.com/show_bug.cgi?id=2363378	external
https://www.cve.org/CVERecord?id=CVE-2022-49788	external
https://nvd.nist.gov/vuln/detail/CVE-2022-49788	external
https://lore.kernel.org/linux-cve-announce/202505…	external
https://access.redhat.com/security/cve/CVE-2023-52451	self
https://bugzilla.redhat.com/show_bug.cgi?id=2265650	external
https://www.cve.org/CVERecord?id=CVE-2023-52451	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52451	external
https://lore.kernel.org/linux-cve-announce/202402…	external
https://access.redhat.com/security/cve/CVE-2023-52764	self
https://bugzilla.redhat.com/show_bug.cgi?id=2282780	external
https://www.cve.org/CVERecord?id=CVE-2023-52764	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52764	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2023-52877	self
https://bugzilla.redhat.com/show_bug.cgi?id=2282712	external
https://www.cve.org/CVERecord?id=CVE-2023-52877	external
https://nvd.nist.gov/vuln/detail/CVE-2023-52877	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2024-26659	self
https://bugzilla.redhat.com/show_bug.cgi?id=2272780	external
https://www.cve.org/CVERecord?id=CVE-2024-26659	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26659	external
https://lore.kernel.org/linux-cve-announce/202404…	external
https://access.redhat.com/security/cve/CVE-2024-26934	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278237	external
https://www.cve.org/CVERecord?id=CVE-2024-26934	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26934	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2024-26964	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278169	external
https://www.cve.org/CVERecord?id=CVE-2024-26964	external
https://nvd.nist.gov/vuln/detail/CVE-2024-26964	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2024-27059	self
https://bugzilla.redhat.com/show_bug.cgi?id=2278398	external
https://www.cve.org/CVERecord?id=CVE-2024-27059	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27059	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2024-36945	self
https://bugzilla.redhat.com/show_bug.cgi?id=2284465	external
https://www.cve.org/CVERecord?id=CVE-2024-36945	external
https://nvd.nist.gov/vuln/detail/CVE-2024-36945	external
https://lore.kernel.org/linux-cve-announce/202405…	external
https://access.redhat.com/security/cve/CVE-2024-43888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2307861	external
https://www.cve.org/CVERecord?id=CVE-2024-43888	external
https://nvd.nist.gov/vuln/detail/CVE-2024-43888	external
https://lore.kernel.org/linux-cve-announce/202408…	external
https://access.redhat.com/security/cve/CVE-2024-57980	self
https://bugzilla.redhat.com/show_bug.cgi?id=2348599	external
https://www.cve.org/CVERecord?id=CVE-2024-57980	external
https://nvd.nist.gov/vuln/detail/CVE-2024-57980	external
https://lore.kernel.org/linux-cve-announce/202502…	external
https://access.redhat.com/security/cve/CVE-2024-58002	self
https://bugzilla.redhat.com/show_bug.cgi?id=2348513	external
https://www.cve.org/CVERecord?id=CVE-2024-58002	external
https://nvd.nist.gov/vuln/detail/CVE-2024-58002	external
https://lore.kernel.org/linux-cve-announce/202502…	external
https://access.redhat.com/security/cve/CVE-2025-21727	self
https://bugzilla.redhat.com/show_bug.cgi?id=2348516	external
https://www.cve.org/CVERecord?id=CVE-2025-21727	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21727	external
https://lore.kernel.org/linux-cve-announce/202502…	external
https://access.redhat.com/security/cve/CVE-2025-21928	self
https://bugzilla.redhat.com/show_bug.cgi?id=2356592	external
https://www.cve.org/CVERecord?id=CVE-2025-21928	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21928	external
https://lore.kernel.org/linux-cve-announce/202504…	external
https://access.redhat.com/security/cve/CVE-2025-21991	self
https://bugzilla.redhat.com/show_bug.cgi?id=2356917	external
https://www.cve.org/CVERecord?id=CVE-2025-21991	external
https://nvd.nist.gov/vuln/detail/CVE-2025-21991	external
https://lore.kernel.org/linux-cve-announce/202504…	external
https://access.redhat.com/security/cve/CVE-2025-37890	self
https://bugzilla.redhat.com/show_bug.cgi?id=2366848	external
https://www.cve.org/CVERecord?id=CVE-2025-37890	external
https://nvd.nist.gov/vuln/detail/CVE-2025-37890	external
https://kernelcve.org/list/?q=CVE-2025-37890	external
https://lore.kernel.org/linux-cve-announce/202505…	external
https://access.redhat.com/security/cve/CVE-2025-37958	self
https://bugzilla.redhat.com/show_bug.cgi?id=2367572	external
https://www.cve.org/CVERecord?id=CVE-2025-37958	external
https://nvd.nist.gov/vuln/detail/CVE-2025-37958	external
https://lore.kernel.org/linux-cve-announce/202505…	external
https://access.redhat.com/security/cve/CVE-2025-38052	self
https://bugzilla.redhat.com/show_bug.cgi?id=2373380	external
https://www.cve.org/CVERecord?id=CVE-2025-38052	external
https://nvd.nist.gov/vuln/detail/CVE-2025-38052	external
https://lore.kernel.org/linux-cve-announce/202506…	external

JSON

To clipboard

Loading 1.9 MB of JSON…

BDU:2026-03966 (CVE-2022-49788)

Vulnerability from fstec – Published: 2026-03-26 – Updated: 2026-03-26 – View on bdu.fstec.ru Fixed

Title

Уязвимость функций qp_notify_peer_local() и qp_notify_peer() модуля drivers/misc/vmw_vmci/vmci_queue_pair.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость функций qp_notify_peer_local() и qp_notify_peer() модуля drivers/misc/vmw_vmci/vmci_queue_pair.c ядра операционной системы Linux связана с доступом к неинициализированному указателю. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:N/I:N/A:C

5.5 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation, Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-824 - Доступ неинициализированного указателя
CWE-908 - Использование неинициализированного ресурса

Aliases

CVE-2022-49788, RHSA-2025:11298, RHSA-2025:11299, RHSA-2025:12746, RHSA-2025:13029, RHSA-2025:13030, RHSA-2025:13061, RHSA-2025:13120, RHSA-2025:13135, RHSA-2025:13633, RHSA-2025:13776, RHSA-2025:13781, RHSA-2025:14136, RHSA-2025:14746, RHSA-2025:14748

References

19 references

URL
https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a
https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609
https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad
https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d
https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7
https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31
https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a
https://www.cve.org/CVERecord?id=CVE-2022-49788
https://git.kernel.org/linus/e5b0d06d9b10f5f43101bd6598b076c347f9295f
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.334
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.300
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.267
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.225
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.156
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.80
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10
https://access.redhat.com/security/cve/cve-2022-49788
https://security-tracker.debian.org/tracker/CVE-2022-49788
https://ubuntu.com/security/CVE-2022-49788

Impacted products

4 products from 4 vendors

Vendors

Canonical Ltd., Red Hat, Inc., Сообщество свободного программного обеспечения

Products

Ubuntu, Red Hat Enterprise Linux, Debian GNU/Linux, Linux

Versions

16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), от 5.5 до 5.10.155 включительно (Linux), от 5.11 до 5.15.79 включительно (Linux), от 5.16 до 6.0.9 включительно (Linux), от 4.10 до 4.14.299 включительно (Linux), от 4.15 до 4.19.266 включительно (Linux), от 4.20 до 5.4.224 включительно (Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), от 3.9 до 4.9.333 включительно (Linux)

Product types

Operating system

Platforms

Canonical Ltd. Ubuntu 16.04 LTS, Canonical Ltd. Ubuntu 18.04 LTS, Red Hat, Inc. Red Hat Enterprise Linux 8, Canonical Ltd. Ubuntu 20.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Canonical Ltd. Ubuntu 22.04 LTS, Inc. Red Hat Enterprise Linux 9, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support, Сообщество свободного программного обеспечения Linux от 5.5 до 5.10.155 включительно, Сообщество свободного программного обеспечения Linux от 5.11 до 5.15.79 включительно, Сообщество свободного программного обеспечения Linux от 5.16 до 6.0.9 включительно, Сообщество свободного программного обеспечения Linux от 4.10 до 4.14.299 включительно, Сообщество свободного программного обеспечения Linux от 4.15 до 4.19.266 включительно, Сообщество свободного программного обеспечения Linux от 4.20 до 5.4.224 включительно, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Сообщество свободного программного обеспечения Linux от 3.9 до 4.9.333 включительно

Mitigations

В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться "Рекомендаций по безопасной настройке операционных систем LINUX", изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года. Использование рекомендаций: Для Linux: https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609 https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7 https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31 https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a Для программных продуктов Red Hat Inc.: https://access.redhat.com/security/cve/cve-2022-49788 Для программных продуктов Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2022-49788 Для программных продуктов Ubuntu: https://ubuntu.com/security/CVE-2022-49788

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., Red Hat, Inc., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 8 (Red Hat Enterprise Linux), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), 8.2 Advanced Update Support (Red Hat Enterprise Linux), \u043e\u0442 5.5 \u0434\u043e 5.10.155 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.79 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.16 \u0434\u043e 6.0.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.10 \u0434\u043e 4.14.299 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.15 \u0434\u043e 4.19.266 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.20 \u0434\u043e 5.4.224 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), 8.4 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 9.0 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.6 Telecommunications Update Service (Red Hat Enterprise Linux), 8.6 Advanced Mission Critical Update Support (Red Hat Enterprise Linux), 7 Extended Lifecycle Support (Red Hat Enterprise Linux), 9.4 Extended Update Support (Red Hat Enterprise Linux), 8.8 Telecommunications Update Service (Red Hat Enterprise Linux), 8.8 Update Services for SAP Solutions (Red Hat Enterprise Linux), 9.2 Update Services for SAP Solutions (Red Hat Enterprise Linux), 8.4 Extended Update Support Long-Life Add-On (Red Hat Enterprise Linux), \u043e\u0442 3.9 \u0434\u043e 4.9.333 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a\nhttps://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609\nhttps://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad\nhttps://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d\nhttps://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7\nhttps://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31\nhttps://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2022-49788\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2022-49788\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ubuntu:\nhttps://ubuntu.com/security/CVE-2022-49788",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.11.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "26.03.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "26.03.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-03966",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-49788, RHSA-2025:11298, RHSA-2025:11299, RHSA-2025:12746, RHSA-2025:13029, RHSA-2025:13030, RHSA-2025:13061, RHSA-2025:13120, RHSA-2025:13135, RHSA-2025:13633, RHSA-2025:13776, RHSA-2025:13781, RHSA-2025:14136, RHSA-2025:14746, RHSA-2025:14748",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Red Hat Enterprise Linux, Debian GNU/Linux, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 16.04 LTS , Canonical Ltd. Ubuntu 18.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 8 , Canonical Ltd. Ubuntu 20.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , Canonical Ltd. Ubuntu 22.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 9 , Red Hat, Inc. Red Hat Enterprise Linux 8.2 Advanced Update Support , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.5 \u0434\u043e 5.10.155 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.11 \u0434\u043e 5.15.79 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.16 \u0434\u043e 6.0.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.10 \u0434\u043e 4.14.299 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.15 \u0434\u043e 4.19.266 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.20 \u0434\u043e 5.4.224 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support , Red Hat, Inc. Red Hat Enterprise Linux 7 Extended Lifecycle Support , Red Hat, Inc. Red Hat Enterprise Linux 9.4 Extended Update Support , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Telecommunications Update Service , Red Hat, Inc. Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions , Red Hat, Inc. Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 3.9 \u0434\u043e 4.9.333 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 qp_notify_peer_local() \u0438 qp_notify_peer() \u043c\u043e\u0434\u0443\u043b\u044f drivers/misc/vmw_vmci/vmci_queue_pair.c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f (CWE-824), \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (CWE-908)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 qp_notify_peer_local() \u0438 qp_notify_peer() \u043c\u043e\u0434\u0443\u043b\u044f drivers/misc/vmw_vmci/vmci_queue_pair.c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044e. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a\nhttps://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609\nhttps://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad\nhttps://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d\nhttps://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7\nhttps://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31\nhttps://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a\nhttps://www.cve.org/CVERecord?id=CVE-2022-49788\nhttps://git.kernel.org/linus/e5b0d06d9b10f5f43101bd6598b076c347f9295f\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.334\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.300\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.267\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.225\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.156\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.80\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10\nhttps://access.redhat.com/security/cve/cve-2022-49788\nhttps://security-tracker.debian.org/tracker/CVE-2022-49788\nhttps://ubuntu.com/security/CVE-2022-49788",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-824, CWE-908",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

CVE-2021-47527 (GCVE-0-2021-47527)

Vulnerability from cvelistv5 – Published: 2024-05-24 15:09 – Updated: 2026-05-11 13:56

Title

serial: core: fix transmit-buffer reset and memleak

Summary

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-10 18:53 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

7 references

URL	Tags
https://git.kernel.org/stable/c/011f6c92b5bf6e1fb…
https://git.kernel.org/stable/c/e74d9663fd57640fc…
https://git.kernel.org/stable/c/1179b168fa3f3a6aa…
https://git.kernel.org/stable/c/c5da8aa4410539585…
https://git.kernel.org/stable/c/e1722acf4f0d4d67b…
https://git.kernel.org/stable/c/64e491c1634b73d3b…
https://git.kernel.org/stable/c/00de977f9e0aa9760…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < 011f6c92b5bf6e1fbfdedc8b5232f64c1c493206 (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < e74d9663fd57640fc3394abb5c76fa95b9cc2f2e (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < 1179b168fa3f3a6aae3bd140000455a0e58457db (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < c5da8aa441053958594f94254592bb41264bdfbf (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8f (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < 64e491c1634b73d3bddc081d08620bdc92ab2c12 (git) Affected: 761ed4a94582ab291aa24dcbea4e01e8936488c8 , < 00de977f9e0aa9760d9a79d1e41ff780f74e3424 (git)
Linux	Linux	Affected: 4.9 Unaffected: 0 , < 4.9 (semver) Unaffected: 4.9.292 , ≤ 4.9.* (semver) Unaffected: 4.14.257 , ≤ 4.14.* (semver) Unaffected: 4.19.220 , ≤ 4.19.* (semver) Unaffected: 5.4.164 , ≤ 5.4.* (semver) Unaffected: 5.10.84 , ≤ 5.10.* (semver) Unaffected: 5.15.7 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47527",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-10T18:53:22.735670Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-10T18:53:36.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.783Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/011f6c92b5bf6e1fbfdedc8b5232f64c1c493206"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e74d9663fd57640fc3394abb5c76fa95b9cc2f2e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1179b168fa3f3a6aae3bd140000455a0e58457db"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c5da8aa441053958594f94254592bb41264bdfbf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/64e491c1634b73d3bddc081d08620bdc92ab2c12"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/00de977f9e0aa9760d9a79d1e41ff780f74e3424"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/serial/serial_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "011f6c92b5bf6e1fbfdedc8b5232f64c1c493206",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "e74d9663fd57640fc3394abb5c76fa95b9cc2f2e",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "1179b168fa3f3a6aae3bd140000455a0e58457db",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "c5da8aa441053958594f94254592bb41264bdfbf",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8f",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "64e491c1634b73d3bddc081d08620bdc92ab2c12",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            },
            {
              "lessThan": "00de977f9e0aa9760d9a79d1e41ff780f74e3424",
              "status": "affected",
              "version": "761ed4a94582ab291aa24dcbea4e01e8936488c8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/serial/serial_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "lessThan": "4.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.292",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.220",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.164",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.84",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.292",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.257",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.220",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.164",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.84",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.7",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "4.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: core: fix transmit-buffer reset and memleak\n\nCommit 761ed4a94582 (\"tty: serial_core: convert uart_close to use\ntty_port_close\") converted serial core to use tty_port_close() but\nfailed to notice that the transmit buffer still needs to be freed on\nfinal close.\n\nNot freeing the transmit buffer means that the buffer is no longer\ncleared on next open so that any ioctl() waiting for the buffer to drain\nmight wait indefinitely (e.g. on termios changes) or that stale data can\nend up being transmitted in case tx is restarted.\n\nFurthermore, the buffer of any port that has been opened would leak on\ndriver unbind.\n\nNote that the port lock is held when clearing the buffer pointer due to\nthe ldisc race worked around by commit a5ba1d95e46e (\"uart: fix race\nbetween uart_put_char() and uart_shutdown()\").\n\nAlso note that the tty-port shutdown() callback is not called for\nconsole ports so it is not strictly necessary to free the buffer page\nafter releasing the lock (cf. d72402145ace (\"tty/serial: do not free\ntrasnmit buffer page under port lock\"))."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T13:56:23.332Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/011f6c92b5bf6e1fbfdedc8b5232f64c1c493206"
        },
        {
          "url": "https://git.kernel.org/stable/c/e74d9663fd57640fc3394abb5c76fa95b9cc2f2e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1179b168fa3f3a6aae3bd140000455a0e58457db"
        },
        {
          "url": "https://git.kernel.org/stable/c/c5da8aa441053958594f94254592bb41264bdfbf"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1722acf4f0d4d67b60f57e08ce16f8b66cd4b8f"
        },
        {
          "url": "https://git.kernel.org/stable/c/64e491c1634b73d3bddc081d08620bdc92ab2c12"
        },
        {
          "url": "https://git.kernel.org/stable/c/00de977f9e0aa9760d9a79d1e41ff780f74e3424"
        }
      ],
      "title": "serial: core: fix transmit-buffer reset and memleak",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47527",
    "datePublished": "2024-05-24T15:09:38.690Z",
    "dateReserved": "2024-05-24T15:02:54.825Z",
    "dateUpdated": "2026-05-11T13:56:23.332Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48669 (GCVE-0-2022-48669)

Vulnerability from cvelistv5 – Published: 2024-05-01 13:03 – Updated: 2026-05-11 18:44

Title

powerpc/pseries: Fix potential memleak in papr_get_attr()

Summary

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in papr_get_attr() `buf` is allocated in papr_get_attr(), and krealloc() of `buf` could fail. We need to free the original `buf` in the case of failure.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-06 18:28 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

5 references

URL	Tags
https://git.kernel.org/stable/c/a3f22feb2220a945d…
https://git.kernel.org/stable/c/1699fb915b9f61794…
https://git.kernel.org/stable/c/7f7d39fe3d80d6143…
https://git.kernel.org/stable/c/d0647c3e81eff62b6…
https://git.kernel.org/stable/c/cda9c0d556283e2d4…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 3c14b73454cf9f6e2146443fdfbdfb912c0efed3 , < a3f22feb2220a945d1c3282e34199e8bcdc5afc4 (git) Affected: 3c14b73454cf9f6e2146443fdfbdfb912c0efed3 , < 1699fb915b9f61794d559b55114c09a390aaf234 (git) Affected: 3c14b73454cf9f6e2146443fdfbdfb912c0efed3 , < 7f7d39fe3d80d6143404940b2413010cf6527029 (git) Affected: 3c14b73454cf9f6e2146443fdfbdfb912c0efed3 , < d0647c3e81eff62b66d46fd4e475318cb8cb3610 (git) Affected: 3c14b73454cf9f6e2146443fdfbdfb912c0efed3 , < cda9c0d556283e2d4adaa9960b2dc19b16156bae (git)
Linux	Linux	Affected: 5.18 Unaffected: 0 , < 5.18 (semver) Unaffected: 6.1.83 , ≤ 6.1.* (semver) Unaffected: 6.6.23 , ≤ 6.6.* (semver) Unaffected: 6.7.11 , ≤ 6.7.* (semver) Unaffected: 6.8.2 , ≤ 6.8.* (semver) Unaffected: 6.9 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-48669",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-06T18:28:26.103975Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-29T18:03:14.971Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:17:55.805Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a3f22feb2220a945d1c3282e34199e8bcdc5afc4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1699fb915b9f61794d559b55114c09a390aaf234"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7f7d39fe3d80d6143404940b2413010cf6527029"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d0647c3e81eff62b66d46fd4e475318cb8cb3610"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cda9c0d556283e2d4adaa9960b2dc19b16156bae"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a3f22feb2220a945d1c3282e34199e8bcdc5afc4",
              "status": "affected",
              "version": "3c14b73454cf9f6e2146443fdfbdfb912c0efed3",
              "versionType": "git"
            },
            {
              "lessThan": "1699fb915b9f61794d559b55114c09a390aaf234",
              "status": "affected",
              "version": "3c14b73454cf9f6e2146443fdfbdfb912c0efed3",
              "versionType": "git"
            },
            {
              "lessThan": "7f7d39fe3d80d6143404940b2413010cf6527029",
              "status": "affected",
              "version": "3c14b73454cf9f6e2146443fdfbdfb912c0efed3",
              "versionType": "git"
            },
            {
              "lessThan": "d0647c3e81eff62b66d46fd4e475318cb8cb3610",
              "status": "affected",
              "version": "3c14b73454cf9f6e2146443fdfbdfb912c0efed3",
              "versionType": "git"
            },
            {
              "lessThan": "cda9c0d556283e2d4adaa9960b2dc19b16156bae",
              "status": "affected",
              "version": "3c14b73454cf9f6e2146443fdfbdfb912c0efed3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/platforms/pseries/papr_platform_attributes.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "lessThan": "5.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.83",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.23",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.11",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix potential memleak in papr_get_attr()\n\n`buf` is allocated in papr_get_attr(), and krealloc() of `buf`\ncould fail. We need to free the original `buf` in the case of failure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:44:51.123Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a3f22feb2220a945d1c3282e34199e8bcdc5afc4"
        },
        {
          "url": "https://git.kernel.org/stable/c/1699fb915b9f61794d559b55114c09a390aaf234"
        },
        {
          "url": "https://git.kernel.org/stable/c/7f7d39fe3d80d6143404940b2413010cf6527029"
        },
        {
          "url": "https://git.kernel.org/stable/c/d0647c3e81eff62b66d46fd4e475318cb8cb3610"
        },
        {
          "url": "https://git.kernel.org/stable/c/cda9c0d556283e2d4adaa9960b2dc19b16156bae"
        }
      ],
      "title": "powerpc/pseries: Fix potential memleak in papr_get_attr()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48669",
    "datePublished": "2024-05-01T13:03:55.005Z",
    "dateReserved": "2024-02-25T13:44:28.321Z",
    "dateUpdated": "2026-05-11T18:44:51.123Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-49395 (GCVE-0-2022-49395)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:11 – Updated: 2026-05-11 18:58

Title

um: Fix out-of-bounds read in LDT setup

Summary

In the Linux kernel, the following vulnerability has been resolved: um: Fix out-of-bounds read in LDT setup syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes. ================================================================== BUG: KASAN: stack-out-of-bounds in syscall_stub_data+0x70/0xe0 Read of size 128 at addr 000000006411f6f0 by task swapper/1 CPU: 0 PID: 1 Comm: swapper Not tainted 5.18.0+ #18 Call Trace: show_stack.cold+0x166/0x2a7 __dump_stack+0x3a/0x43 dump_stack_lvl+0x1f/0x27 print_report.cold+0xdb/0xf81 kasan_report+0x119/0x1f0 kasan_check_range+0x3a3/0x440 memcpy+0x52/0x140 syscall_stub_data+0x70/0xe0 write_ldt_entry+0xac/0x190 init_new_ldt+0x515/0x960 init_new_context+0x2c4/0x4d0 mm_init.constprop.0+0x5ed/0x760 mm_alloc+0x118/0x170 0x60033f48 do_one_initcall+0x1d7/0x860 0x60003e7b kernel_init+0x6e/0x3d4 new_thread_handler+0x1e7/0x2c0 The buggy address belongs to stack of task swapper/1 and is located at offset 64 in frame: init_new_ldt+0x0/0x960 This frame has 2 objects: [32, 40) 'addr' [64, 80) 'desc' ==================================================================

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-01 19:41 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/668ca34a428d6ffc0…
https://git.kernel.org/stable/c/ef1dc929a1e5fa1b2…
https://git.kernel.org/stable/c/3549ab4b962cf619e…
https://git.kernel.org/stable/c/9caad70819aef3431…
https://git.kernel.org/stable/c/cf0dabc37446c5ee5…
https://git.kernel.org/stable/c/10995a382271254bd…
https://git.kernel.org/stable/c/24ca648bf5f72ed88…
https://git.kernel.org/stable/c/91e5ba2af2d729d51…
https://git.kernel.org/stable/c/2a4a62a14be1947fa…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 668ca34a428d6ffc0f99a1a6a9b661a288d4183b (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < ef1dc929a1e5fa1b2d842256db9fb8710d3be910 (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 3549ab4b962cf619e8c55484a0d870a34b3f845f (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 9caad70819aef3431abaf73ba5163b55b161aba0 (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < cf0dabc37446c5ee538ae7b4c467ab0e53fa5463 (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 10995a382271254bd276627ec74136da4a23c4a6 (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 24ca648bf5f72ed8878cf09b5d4431935779681e (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 91e5ba2af2d729d5126aefd5aa3eadc69b8426e5 (git) Affected: 858259cf7d1c443c836a2022b78cb281f0a9b95e , < 2a4a62a14be1947fa945c5c11ebf67326381a568 (git)
Linux	Linux	Affected: 2.6.15 Unaffected: 0 , < 2.6.15 (semver) Unaffected: 4.9.318 , ≤ 4.9.* (semver) Unaffected: 4.14.283 , ≤ 4.14.* (semver) Unaffected: 4.19.247 , ≤ 4.19.* (semver) Unaffected: 5.4.198 , ≤ 5.4.* (semver) Unaffected: 5.10.121 , ≤ 5.10.* (semver) Unaffected: 5.15.46 , ≤ 5.15.* (semver) Unaffected: 5.17.14 , ≤ 5.17.* (semver) Unaffected: 5.18.3 , ≤ 5.18.* (semver) Unaffected: 5.19 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-49395",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T19:41:28.052131Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-125",
                "description": "CWE-125 Out-of-bounds Read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T19:46:50.853Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/um/ldt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "668ca34a428d6ffc0f99a1a6a9b661a288d4183b",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "ef1dc929a1e5fa1b2d842256db9fb8710d3be910",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "3549ab4b962cf619e8c55484a0d870a34b3f845f",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "9caad70819aef3431abaf73ba5163b55b161aba0",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "cf0dabc37446c5ee538ae7b4c467ab0e53fa5463",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "10995a382271254bd276627ec74136da4a23c4a6",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "24ca648bf5f72ed8878cf09b5d4431935779681e",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "91e5ba2af2d729d5126aefd5aa3eadc69b8426e5",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            },
            {
              "lessThan": "2a4a62a14be1947fa945c5c11ebf67326381a568",
              "status": "affected",
              "version": "858259cf7d1c443c836a2022b78cb281f0a9b95e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/x86/um/ldt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.15"
            },
            {
              "lessThan": "2.6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.318",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.283",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.247",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.121",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.318",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.283",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.247",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.198",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.121",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.46",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.14",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.3",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "2.6.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\num: Fix out-of-bounds read in LDT setup\n\nsyscall_stub_data() expects the data_count parameter to be the number of\nlongs, not bytes.\n\n ==================================================================\n BUG: KASAN: stack-out-of-bounds in syscall_stub_data+0x70/0xe0\n Read of size 128 at addr 000000006411f6f0 by task swapper/1\n\n CPU: 0 PID: 1 Comm: swapper Not tainted 5.18.0+ #18\n Call Trace:\n  show_stack.cold+0x166/0x2a7\n  __dump_stack+0x3a/0x43\n  dump_stack_lvl+0x1f/0x27\n  print_report.cold+0xdb/0xf81\n  kasan_report+0x119/0x1f0\n  kasan_check_range+0x3a3/0x440\n  memcpy+0x52/0x140\n  syscall_stub_data+0x70/0xe0\n  write_ldt_entry+0xac/0x190\n  init_new_ldt+0x515/0x960\n  init_new_context+0x2c4/0x4d0\n  mm_init.constprop.0+0x5ed/0x760\n  mm_alloc+0x118/0x170\n  0x60033f48\n  do_one_initcall+0x1d7/0x860\n  0x60003e7b\n  kernel_init+0x6e/0x3d4\n  new_thread_handler+0x1e7/0x2c0\n\n The buggy address belongs to stack of task swapper/1\n  and is located at offset 64 in frame:\n  init_new_ldt+0x0/0x960\n\n This frame has 2 objects:\n  [32, 40) \u0027addr\u0027\n  [64, 80) \u0027desc\u0027\n =================================================================="
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:58:55.326Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/668ca34a428d6ffc0f99a1a6a9b661a288d4183b"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef1dc929a1e5fa1b2d842256db9fb8710d3be910"
        },
        {
          "url": "https://git.kernel.org/stable/c/3549ab4b962cf619e8c55484a0d870a34b3f845f"
        },
        {
          "url": "https://git.kernel.org/stable/c/9caad70819aef3431abaf73ba5163b55b161aba0"
        },
        {
          "url": "https://git.kernel.org/stable/c/cf0dabc37446c5ee538ae7b4c467ab0e53fa5463"
        },
        {
          "url": "https://git.kernel.org/stable/c/10995a382271254bd276627ec74136da4a23c4a6"
        },
        {
          "url": "https://git.kernel.org/stable/c/24ca648bf5f72ed8878cf09b5d4431935779681e"
        },
        {
          "url": "https://git.kernel.org/stable/c/91e5ba2af2d729d5126aefd5aa3eadc69b8426e5"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a4a62a14be1947fa945c5c11ebf67326381a568"
        }
      ],
      "title": "um: Fix out-of-bounds read in LDT setup",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49395",
    "datePublished": "2025-02-26T02:11:25.676Z",
    "dateReserved": "2025-02-26T02:08:31.562Z",
    "dateUpdated": "2026-05-11T18:58:55.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-49788 (GCVE-0-2022-49788)

Vulnerability from cvelistv5 – Published: 2025-05-01 14:09 – Updated: 2026-11-05 19:49

Title

misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

Summary

In the Linux kernel, the following vulnerability has been resolved: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() `struct vmci_event_qp` allocated by qp_notify_peer() contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121 instrument_copy_to_user ./include/linux/instrumented.h:121 _copy_to_user+0x5f/0xb0 lib/usercopy.c:33 copy_to_user ./include/linux/uaccess.h:169 vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431 vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925 vfs_ioctl fs/ioctl.c:51 ... Uninit was stored to memory at: kmemdup+0x74/0xb0 mm/util.c:131 dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271 vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339 qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479 qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662 qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750 vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940 vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488 vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927 ... Local variable ev created at: qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456 qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662 qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750 Bytes 28-31 of 48 are uninitialized Memory access of size 48 starts at ffff888035155e00 Data copied to user address 0000000020000100 Use memset() to prevent the infoleaks. Also speculatively fix qp_notify_peer_local(), which may suffer from the same problem.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-05 19:48 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/7ccf7229b96fadc3a…
https://git.kernel.org/stable/c/f04586c2315cfd03d…
https://git.kernel.org/stable/c/5a275528025ae4bc7…
https://git.kernel.org/stable/c/e7061dd1fef2dfb64…
https://git.kernel.org/stable/c/62634b43d3c4e1bf6…
https://git.kernel.org/stable/c/8e2f33c598370bcf8…
https://git.kernel.org/stable/c/76c50d77b928a33e5…
https://git.kernel.org/stable/c/e5b0d06d9b10f5f43…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < 7ccf7229b96fadc3a185d1391f814a604c7ef609 (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < f04586c2315cfd03d72ad0395705435e7ed07b1a (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < 5a275528025ae4bc7e2232866856dfebf84b2fad (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < e7061dd1fef2dfb6458cd521aef27aa66f510d31 (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < 62634b43d3c4e1bf62fd540196f7081bf0885c0a (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < 8e2f33c598370bcf828bab4d667d1d38bcd3c57d (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < 76c50d77b928a33e5290aaa9fdc10e88254ff8c7 (git) Affected: 06164d2b72aa752ce4633184b3e0d97601017135 , < e5b0d06d9b10f5f43101bd6598b076c347f9295f (git)
Linux	Linux	Affected: 3.9 Unaffected: 0 , < 3.9 (semver) Unaffected: 4.9.334 , ≤ 4.9.* (semver) Unaffected: 4.14.300 , ≤ 4.14.* (semver) Unaffected: 4.19.267 , ≤ 4.19.* (semver) Unaffected: 5.4.225 , ≤ 5.4.* (semver) Unaffected: 5.10.156 , ≤ 5.10.* (semver) Unaffected: 5.15.80 , ≤ 5.15.* (semver) Unaffected: 6.0.10 , ≤ 6.0.* (semver) Unaffected: 6.1 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-49788",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-05T19:48:00.593549Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-05T19:49:48.761Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/misc/vmw_vmci/vmci_queue_pair.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7ccf7229b96fadc3a185d1391f814a604c7ef609",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "f04586c2315cfd03d72ad0395705435e7ed07b1a",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "5a275528025ae4bc7e2232866856dfebf84b2fad",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "e7061dd1fef2dfb6458cd521aef27aa66f510d31",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "62634b43d3c4e1bf62fd540196f7081bf0885c0a",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "8e2f33c598370bcf828bab4d667d1d38bcd3c57d",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "76c50d77b928a33e5290aaa9fdc10e88254ff8c7",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            },
            {
              "lessThan": "e5b0d06d9b10f5f43101bd6598b076c347f9295f",
              "status": "affected",
              "version": "06164d2b72aa752ce4633184b3e0d97601017135",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/misc/vmw_vmci/vmci_queue_pair.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.9"
            },
            {
              "lessThan": "3.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.334",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.300",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.267",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.225",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.156",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.80",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.334",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.300",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.267",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.225",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.156",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.80",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.10",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "3.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n\n`struct vmci_event_qp` allocated by qp_notify_peer() contains padding,\nwhich may carry uninitialized data to the userspace, as observed by\nKMSAN:\n\n  BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121\n   instrument_copy_to_user ./include/linux/instrumented.h:121\n   _copy_to_user+0x5f/0xb0 lib/usercopy.c:33\n   copy_to_user ./include/linux/uaccess.h:169\n   vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431\n   vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925\n   vfs_ioctl fs/ioctl.c:51\n  ...\n\n  Uninit was stored to memory at:\n   kmemdup+0x74/0xb0 mm/util.c:131\n   dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271\n   vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339\n   qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479\n   qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n   qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n   vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940\n   vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488\n   vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927\n  ...\n\n  Local variable ev created at:\n   qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456\n   qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n   qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n\n  Bytes 28-31 of 48 are uninitialized\n  Memory access of size 48 starts at ffff888035155e00\n  Data copied to user address 0000000020000100\n\nUse memset() to prevent the infoleaks.\n\nAlso speculatively fix qp_notify_peer_local(), which may suffer from the\nsame problem."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:06:47.654Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609"
        },
        {
          "url": "https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a"
        },
        {
          "url": "https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad"
        },
        {
          "url": "https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31"
        },
        {
          "url": "https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d"
        },
        {
          "url": "https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7"
        },
        {
          "url": "https://git.kernel.org/stable/c/e5b0d06d9b10f5f43101bd6598b076c347f9295f"
        }
      ],
      "title": "misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49788",
    "datePublished": "2025-05-01T14:09:20.506Z",
    "dateReserved": "2025-05-01T14:05:17.223Z",
    "dateUpdated": "2026-11-05T19:49:48.761Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-52451 (GCVE-0-2023-52451)

Vulnerability from cvelistv5 – Published: 2024-02-22 16:21 – Updated: 2026-05-11 19:27

Title

powerpc/pseries/memhp: Fix access beyond end of drmem array

Summary

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/memhp: Fix access beyond end of drmem array dlpar_memory_remove_by_index() may access beyond the bounds of the drmem lmb array when the LMB lookup fails to match an entry with the given DRC index. When the search fails, the cursor is left pointing to &drmem_info->lmbs[drmem_info->n_lmbs], which is one element past the last valid entry in the array. The debug message at the end of the function then dereferences this pointer: pr_debug("Failed to hot-remove memory at %llx\n", lmb->base_addr); This was found by inspection and confirmed with KASAN: pseries-hotplug-mem: Attempting to hot-remove LMB, drc index 1234 ================================================================== BUG: KASAN: slab-out-of-bounds in dlpar_memory+0x298/0x1658 Read of size 8 at addr c000000364e97fd0 by task bash/949 dump_stack_lvl+0xa4/0xfc (unreliable) print_report+0x214/0x63c kasan_report+0x140/0x2e0 __asan_load8+0xa8/0xe0 dlpar_memory+0x298/0x1658 handle_dlpar_errorlog+0x130/0x1d0 dlpar_store+0x18c/0x3e0 kobj_attr_store+0x68/0xa0 sysfs_kf_write+0xc4/0x110 kernfs_fop_write_iter+0x26c/0x390 vfs_write+0x2d4/0x4e0 ksys_write+0xac/0x1a0 system_call_exception+0x268/0x530 system_call_vectored_common+0x15c/0x2ec Allocated by task 1: kasan_save_stack+0x48/0x80 kasan_set_track+0x34/0x50 kasan_save_alloc_info+0x34/0x50 __kasan_kmalloc+0xd0/0x120 __kmalloc+0x8c/0x320 kmalloc_array.constprop.0+0x48/0x5c drmem_init+0x2a0/0x41c do_one_initcall+0xe0/0x5c0 kernel_init_freeable+0x4ec/0x5a0 kernel_init+0x30/0x1e0 ret_from_kernel_user_thread+0x14/0x1c The buggy address belongs to the object at c000000364e80000 which belongs to the cache kmalloc-128k of size 131072 The buggy address is located 0 bytes to the right of allocated 98256-byte region [c000000364e80000, c000000364e97fd0) ================================================================== pseries-hotplug-mem: Failed to hot-remove memory at 0 Log failed lookups with a separate message and dereference the cursor only when it points to a valid entry.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-02-22 20:29 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/bb79613a9a704469d…
https://git.kernel.org/stable/c/9b5f03500bc5b083c…
https://git.kernel.org/stable/c/b582aa1f66411d4ad…
https://git.kernel.org/stable/c/999a27b3ce9a69d54…
https://git.kernel.org/stable/c/026fd977dc50ff4a5…
https://git.kernel.org/stable/c/df16afba2378d9853…
https://git.kernel.org/stable/c/708a4b59baad96c47…
https://git.kernel.org/stable/c/bd68ffce69f6cf8dd…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < bb79613a9a704469ddb8d6c6029d532a5cea384c (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < 9b5f03500bc5b083c0df696d7dd169d7ef3dd0c7 (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < b582aa1f66411d4adcc1aa55b8c575683fb4687e (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < 999a27b3ce9a69d54ccd5db000ec3a447bc43e6d (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < 026fd977dc50ff4a5e09bfb0603557f104d3f3a0 (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < df16afba2378d985359812c865a15c05c70a967e (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < 708a4b59baad96c4718dc0bd3a3427d3ab22fedc (git) Affected: 51925fb3c5c901aa06cdc853268a6e19e19bcdc7 , < bd68ffce69f6cf8ddd3a3c32549d1d2275e49fc5 (git)
Linux	Linux	Affected: 4.1 Unaffected: 0 , < 4.1 (semver) Unaffected: 4.19.306 , ≤ 4.19.* (semver) Unaffected: 5.4.268 , ≤ 5.4.* (semver) Unaffected: 5.10.209 , ≤ 5.10.* (semver) Unaffected: 5.15.148 , ≤ 5.15.* (semver) Unaffected: 6.1.75 , ≤ 6.1.* (semver) Unaffected: 6.6.14 , ≤ 6.6.* (semver) Unaffected: 6.7.2 , ≤ 6.7.* (semver) Unaffected: 6.8 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T20:29:32.183324Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:21:57.905Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:55:41.646Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bb79613a9a704469ddb8d6c6029d532a5cea384c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9b5f03500bc5b083c0df696d7dd169d7ef3dd0c7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b582aa1f66411d4adcc1aa55b8c575683fb4687e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/999a27b3ce9a69d54ccd5db000ec3a447bc43e6d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/026fd977dc50ff4a5e09bfb0603557f104d3f3a0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/df16afba2378d985359812c865a15c05c70a967e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/708a4b59baad96c4718dc0bd3a3427d3ab22fedc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bd68ffce69f6cf8ddd3a3c32549d1d2275e49fc5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/platforms/pseries/hotplug-memory.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bb79613a9a704469ddb8d6c6029d532a5cea384c",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "9b5f03500bc5b083c0df696d7dd169d7ef3dd0c7",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "b582aa1f66411d4adcc1aa55b8c575683fb4687e",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "999a27b3ce9a69d54ccd5db000ec3a447bc43e6d",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "026fd977dc50ff4a5e09bfb0603557f104d3f3a0",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "df16afba2378d985359812c865a15c05c70a967e",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "708a4b59baad96c4718dc0bd3a3427d3ab22fedc",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            },
            {
              "lessThan": "bd68ffce69f6cf8ddd3a3c32549d1d2275e49fc5",
              "status": "affected",
              "version": "51925fb3c5c901aa06cdc853268a6e19e19bcdc7",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/platforms/pseries/hotplug-memory.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "lessThan": "4.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.306",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.268",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.306",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.268",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.209",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.148",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.75",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.14",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.2",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/memhp: Fix access beyond end of drmem array\n\ndlpar_memory_remove_by_index() may access beyond the bounds of the\ndrmem lmb array when the LMB lookup fails to match an entry with the\ngiven DRC index. When the search fails, the cursor is left pointing to\n\u0026drmem_info-\u003elmbs[drmem_info-\u003en_lmbs], which is one element past the\nlast valid entry in the array. The debug message at the end of the\nfunction then dereferences this pointer:\n\n        pr_debug(\"Failed to hot-remove memory at %llx\\n\",\n                 lmb-\u003ebase_addr);\n\nThis was found by inspection and confirmed with KASAN:\n\n  pseries-hotplug-mem: Attempting to hot-remove LMB, drc index 1234\n  ==================================================================\n  BUG: KASAN: slab-out-of-bounds in dlpar_memory+0x298/0x1658\n  Read of size 8 at addr c000000364e97fd0 by task bash/949\n\n  dump_stack_lvl+0xa4/0xfc (unreliable)\n  print_report+0x214/0x63c\n  kasan_report+0x140/0x2e0\n  __asan_load8+0xa8/0xe0\n  dlpar_memory+0x298/0x1658\n  handle_dlpar_errorlog+0x130/0x1d0\n  dlpar_store+0x18c/0x3e0\n  kobj_attr_store+0x68/0xa0\n  sysfs_kf_write+0xc4/0x110\n  kernfs_fop_write_iter+0x26c/0x390\n  vfs_write+0x2d4/0x4e0\n  ksys_write+0xac/0x1a0\n  system_call_exception+0x268/0x530\n  system_call_vectored_common+0x15c/0x2ec\n\n  Allocated by task 1:\n   kasan_save_stack+0x48/0x80\n   kasan_set_track+0x34/0x50\n   kasan_save_alloc_info+0x34/0x50\n   __kasan_kmalloc+0xd0/0x120\n   __kmalloc+0x8c/0x320\n   kmalloc_array.constprop.0+0x48/0x5c\n   drmem_init+0x2a0/0x41c\n   do_one_initcall+0xe0/0x5c0\n   kernel_init_freeable+0x4ec/0x5a0\n   kernel_init+0x30/0x1e0\n   ret_from_kernel_user_thread+0x14/0x1c\n\n  The buggy address belongs to the object at c000000364e80000\n   which belongs to the cache kmalloc-128k of size 131072\n  The buggy address is located 0 bytes to the right of\n   allocated 98256-byte region [c000000364e80000, c000000364e97fd0)\n\n  ==================================================================\n  pseries-hotplug-mem: Failed to hot-remove memory at 0\n\nLog failed lookups with a separate message and dereference the\ncursor only when it points to a valid entry."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:27:35.148Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bb79613a9a704469ddb8d6c6029d532a5cea384c"
        },
        {
          "url": "https://git.kernel.org/stable/c/9b5f03500bc5b083c0df696d7dd169d7ef3dd0c7"
        },
        {
          "url": "https://git.kernel.org/stable/c/b582aa1f66411d4adcc1aa55b8c575683fb4687e"
        },
        {
          "url": "https://git.kernel.org/stable/c/999a27b3ce9a69d54ccd5db000ec3a447bc43e6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/026fd977dc50ff4a5e09bfb0603557f104d3f3a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/df16afba2378d985359812c865a15c05c70a967e"
        },
        {
          "url": "https://git.kernel.org/stable/c/708a4b59baad96c4718dc0bd3a3427d3ab22fedc"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd68ffce69f6cf8ddd3a3c32549d1d2275e49fc5"
        }
      ],
      "title": "powerpc/pseries/memhp: Fix access beyond end of drmem array",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52451",
    "datePublished": "2024-02-22T16:21:42.295Z",
    "dateReserved": "2024-02-20T12:30:33.293Z",
    "dateUpdated": "2026-05-11T19:27:35.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-52764 (GCVE-0-2023-52764)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:30 – Updated: 2026-05-11 19:32

Title

media: gspca: cpia1: shift-out-of-bounds in set_flicker

Summary

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 15:37 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

9 references

URL	Tags
https://git.kernel.org/stable/c/69bba62600bd91d6b…
https://git.kernel.org/stable/c/2eee8edfff90e2298…
https://git.kernel.org/stable/c/8f83c85ee88225319…
https://git.kernel.org/stable/c/c6b6b8692218da73b…
https://git.kernel.org/stable/c/09cd8b561aa979690…
https://git.kernel.org/stable/c/a647f27a7426d2fe1…
https://git.kernel.org/stable/c/93bddd6529f187f51…
https://git.kernel.org/stable/c/e2d7149b913d14352…
https://git.kernel.org/stable/c/099be1822d1f09543…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 69bba62600bd91d6b7c1e8ca181faf8ac64f7060 (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 2eee8edfff90e22980a6b22079d238c3c9d323bb (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 8f83c85ee88225319c52680792320c02158c2a9b (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < c6b6b8692218da73b33b310d7c1df90f115bdd9a (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 09cd8b561aa9796903710a1046957f2b112c8f26 (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < a647f27a7426d2fe1b40da7c8fa2b81354a51177 (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 93bddd6529f187f510eec759f37d0569243c9809 (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < e2d7149b913d14352c82624e723ce1c211ca06d3 (git) Affected: 54e8bc5d64a651e2fb8b2366637e6a7d920a4c70 , < 099be1822d1f095433f4b08af9cc9d6308ec1953 (git)
Linux	Linux	Affected: 2.6.34 Unaffected: 0 , < 2.6.34 (semver) Unaffected: 4.14.331 , ≤ 4.14.* (semver) Unaffected: 4.19.300 , ≤ 4.19.* (semver) Unaffected: 5.4.262 , ≤ 5.4.* (semver) Unaffected: 5.10.202 , ≤ 5.10.* (semver) Unaffected: 5.15.140 , ≤ 5.15.* (semver) Unaffected: 6.1.64 , ≤ 6.1.* (semver) Unaffected: 6.5.13 , ≤ 6.5.* (semver) Unaffected: 6.6.3 , ≤ 6.6.* (semver) Unaffected: 6.7 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:35.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/69bba62600bd91d6b7c1e8ca181faf8ac64f7060"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2eee8edfff90e22980a6b22079d238c3c9d323bb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8f83c85ee88225319c52680792320c02158c2a9b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c6b6b8692218da73b33b310d7c1df90f115bdd9a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/09cd8b561aa9796903710a1046957f2b112c8f26"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a647f27a7426d2fe1b40da7c8fa2b81354a51177"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/93bddd6529f187f510eec759f37d0569243c9809"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e2d7149b913d14352c82624e723ce1c211ca06d3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/099be1822d1f095433f4b08af9cc9d6308ec1953"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52764",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:37:06.356182Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:31.755Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/gspca/cpia1.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "69bba62600bd91d6b7c1e8ca181faf8ac64f7060",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "2eee8edfff90e22980a6b22079d238c3c9d323bb",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "8f83c85ee88225319c52680792320c02158c2a9b",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "c6b6b8692218da73b33b310d7c1df90f115bdd9a",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "09cd8b561aa9796903710a1046957f2b112c8f26",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "a647f27a7426d2fe1b40da7c8fa2b81354a51177",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "93bddd6529f187f510eec759f37d0569243c9809",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "e2d7149b913d14352c82624e723ce1c211ca06d3",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            },
            {
              "lessThan": "099be1822d1f095433f4b08af9cc9d6308ec1953",
              "status": "affected",
              "version": "54e8bc5d64a651e2fb8b2366637e6a7d920a4c70",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/gspca/cpia1.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.34"
            },
            {
              "lessThan": "2.6.34",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.331",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.300",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.262",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.331",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.300",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.262",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.202",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.140",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.64",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.13",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.3",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "2.6.34",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: gspca: cpia1: shift-out-of-bounds in set_flicker\n\nSyzkaller reported the following issue:\nUBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27\nshift exponent 245 is too large for 32-bit type \u0027int\u0027\n\nWhen the value of the variable \"sd-\u003eparams.exposure.gain\" exceeds the\nnumber of bits in an integer, a shift-out-of-bounds error is reported. It\nis triggered because the variable \"currentexp\" cannot be left-shifted by\nmore than the number of bits in an integer. In order to avoid invalid\nrange during left-shift, the conditional expression is added."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:32:41.329Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/69bba62600bd91d6b7c1e8ca181faf8ac64f7060"
        },
        {
          "url": "https://git.kernel.org/stable/c/2eee8edfff90e22980a6b22079d238c3c9d323bb"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f83c85ee88225319c52680792320c02158c2a9b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c6b6b8692218da73b33b310d7c1df90f115bdd9a"
        },
        {
          "url": "https://git.kernel.org/stable/c/09cd8b561aa9796903710a1046957f2b112c8f26"
        },
        {
          "url": "https://git.kernel.org/stable/c/a647f27a7426d2fe1b40da7c8fa2b81354a51177"
        },
        {
          "url": "https://git.kernel.org/stable/c/93bddd6529f187f510eec759f37d0569243c9809"
        },
        {
          "url": "https://git.kernel.org/stable/c/e2d7149b913d14352c82624e723ce1c211ca06d3"
        },
        {
          "url": "https://git.kernel.org/stable/c/099be1822d1f095433f4b08af9cc9d6308ec1953"
        }
      ],
      "title": "media: gspca: cpia1: shift-out-of-bounds in set_flicker",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52764",
    "datePublished": "2024-05-21T15:30:49.032Z",
    "dateReserved": "2024-05-21T15:19:24.238Z",
    "dateUpdated": "2026-05-11T19:32:41.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-52877 (GCVE-0-2023-52877)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:32 – Updated: 2026-05-11 19:34

Title

usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()

Summary

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-10 19:16 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

5 references

URL	Tags
https://git.kernel.org/stable/c/e5f53a68a596e04df…
https://git.kernel.org/stable/c/e7a802447c491903a…
https://git.kernel.org/stable/c/9ee038590d808a95d…
https://git.kernel.org/stable/c/b37a168c013715604…
https://git.kernel.org/stable/c/4987daf86c152ff88…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5e1d4c49fbc86dab6e005d66f066bd53c9479cde , < e5f53a68a596e04df3fde3099273435a30b6fdac (git) Affected: 5e1d4c49fbc86dab6e005d66f066bd53c9479cde , < e7a802447c491903aa7cb45967aa2a934a4e63fc (git) Affected: 5e1d4c49fbc86dab6e005d66f066bd53c9479cde , < 9ee038590d808a95d16adf92818dcd4752273c08 (git) Affected: 5e1d4c49fbc86dab6e005d66f066bd53c9479cde , < b37a168c0137156042a0ca9626651b5a789e822b (git) Affected: 5e1d4c49fbc86dab6e005d66f066bd53c9479cde , < 4987daf86c152ff882d51572d154ad12e4ff3a4b (git)
Linux	Linux	Affected: 5.12 Unaffected: 0 , < 5.12 (semver) Unaffected: 5.15.138 , ≤ 5.15.* (semver) Unaffected: 6.1.62 , ≤ 6.1.* (semver) Unaffected: 6.5.11 , ≤ 6.5.* (semver) Unaffected: 6.6.1 , ≤ 6.6.* (semver) Unaffected: 6.7 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52877",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-10T19:16:07.522837Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-10T19:16:15.611Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:36.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/typec/tcpm/tcpm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e5f53a68a596e04df3fde3099273435a30b6fdac",
              "status": "affected",
              "version": "5e1d4c49fbc86dab6e005d66f066bd53c9479cde",
              "versionType": "git"
            },
            {
              "lessThan": "e7a802447c491903aa7cb45967aa2a934a4e63fc",
              "status": "affected",
              "version": "5e1d4c49fbc86dab6e005d66f066bd53c9479cde",
              "versionType": "git"
            },
            {
              "lessThan": "9ee038590d808a95d16adf92818dcd4752273c08",
              "status": "affected",
              "version": "5e1d4c49fbc86dab6e005d66f066bd53c9479cde",
              "versionType": "git"
            },
            {
              "lessThan": "b37a168c0137156042a0ca9626651b5a789e822b",
              "status": "affected",
              "version": "5e1d4c49fbc86dab6e005d66f066bd53c9479cde",
              "versionType": "git"
            },
            {
              "lessThan": "4987daf86c152ff882d51572d154ad12e4ff3a4b",
              "status": "affected",
              "version": "5e1d4c49fbc86dab6e005d66f066bd53c9479cde",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/typec/tcpm/tcpm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.138",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.62",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.138",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.62",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.11",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.1",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()\n\nIt is possible that typec_register_partner() returns ERR_PTR on failure.\nWhen port-\u003epartner is an error, a NULL pointer dereference may occur as\nshown below.\n\n[91222.095236][  T319] typec port0: failed to register partner (-17)\n...\n[91225.061491][  T319] Unable to handle kernel NULL pointer dereference\nat virtual address 000000000000039f\n[91225.274642][  T319] pc : tcpm_pd_data_request+0x310/0x13fc\n[91225.274646][  T319] lr : tcpm_pd_data_request+0x298/0x13fc\n[91225.308067][  T319] Call trace:\n[91225.308070][  T319]  tcpm_pd_data_request+0x310/0x13fc\n[91225.308073][  T319]  tcpm_pd_rx_handler+0x100/0x9e8\n[91225.355900][  T319]  kthread_worker_fn+0x178/0x58c\n[91225.355902][  T319]  kthread+0x150/0x200\n[91225.355905][  T319]  ret_from_fork+0x10/0x30\n\nAdd a check for port-\u003epartner to avoid dereferencing a NULL pointer."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:34:45.250Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac"
        },
        {
          "url": "https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc"
        },
        {
          "url": "https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08"
        },
        {
          "url": "https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b"
        },
        {
          "url": "https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b"
        }
      ],
      "title": "usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52877",
    "datePublished": "2024-05-21T15:32:09.946Z",
    "dateReserved": "2024-05-21T15:19:24.264Z",
    "dateUpdated": "2026-05-11T19:34:45.250Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-26659 (GCVE-0-2024-26659)

Vulnerability from cvelistv5 – Published: 2024-04-02 06:22 – Updated: 2026-10-15 00:38

Title

xhci: handle isoc Babble and Buffer Overrun events properly

Summary

In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly forbids assuming that the xHC has released its ownership of a multi-TRB TD when it reports an error on one of the early TRBs. Yet the driver makes such assumption and releases the TD, allowing the remaining TRBs to be freed or overwritten by new TDs. The xHC should also report completion of the final TRB due to its IOC flag being set by us, regardless of prior errors. This event cannot be recognized if the TD has already been freed earlier, resulting in "Transfer event TRB DMA ptr not part of current TD" error message. Fix this by reusing the logic for processing isoc Transaction Errors. This also handles hosts which fail to report the final completion. Fix transfer length reporting on Babble errors. They may be caused by device malfunction, no guarantee that the buffer has been filled.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-17 19:31 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

8 references

URL	Tags
https://git.kernel.org/stable/c/696e4112e5c1ee619…
https://git.kernel.org/stable/c/2aa7bcfdbb46241c7…
https://git.kernel.org/stable/c/2e3ec80ea7ba58bbb…
https://git.kernel.org/stable/c/f5e7ffa9269a448a7…
https://git.kernel.org/stable/c/418456c0ce5620961…
https://git.kernel.org/stable/c/7c4650ded49e5b889…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < 696e4112e5c1ee61996198f0ebb6ca3fab55166e (git) Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < 2aa7bcfdbb46241c701811bbc0d64d7884e3346c (git) Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < 2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3 (git) Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < f5e7ffa9269a448a720e21f1ed1384d118298c97 (git) Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < 418456c0ce56209610523f21734c5612ee634134 (git) Affected: 04e51901dd44f40a5a385ced897f6bca87d5f40a , < 7c4650ded49e5b88929ecbbb631efb8b0838e811 (git)
Linux	Linux	Affected: 2.6.36 Unaffected: 0 , < 2.6.36 (semver) Unaffected: 5.10.213 , ≤ 5.10.* (semver) Unaffected: 5.15.152 , ≤ 5.15.* (semver) Unaffected: 6.1.82 , ≤ 6.1.* (semver) Unaffected: 6.6.17 , ≤ 6.6.* (semver) Unaffected: 6.7.5 , ≤ 6.7.* (semver) Unaffected: 6.8 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < V1.1.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26659",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-17T19:31:25.014647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-17T19:31:33.585Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:14:12.454Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/696e4112e5c1ee61996198f0ebb6ca3fab55166e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2aa7bcfdbb46241c701811bbc0d64d7884e3346c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f5e7ffa9269a448a720e21f1ed1384d118298c97"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/418456c0ce56209610523f21734c5612ee634134"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7c4650ded49e5b88929ecbbb631efb8b0838e811"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T00:38:24.321Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/host/xhci-ring.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "696e4112e5c1ee61996198f0ebb6ca3fab55166e",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            },
            {
              "lessThan": "2aa7bcfdbb46241c701811bbc0d64d7884e3346c",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            },
            {
              "lessThan": "2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            },
            {
              "lessThan": "f5e7ffa9269a448a720e21f1ed1384d118298c97",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            },
            {
              "lessThan": "418456c0ce56209610523f21734c5612ee634134",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            },
            {
              "lessThan": "7c4650ded49e5b88929ecbbb631efb8b0838e811",
              "status": "affected",
              "version": "04e51901dd44f40a5a385ced897f6bca87d5f40a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/host/xhci-ring.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.36"
            },
            {
              "lessThan": "2.6.36",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.213",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.152",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.82",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.213",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.152",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.82",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.17",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.5",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nxhci: handle isoc Babble and Buffer Overrun events properly\n\nxHCI 4.9 explicitly forbids assuming that the xHC has released its\nownership of a multi-TRB TD when it reports an error on one of the\nearly TRBs. Yet the driver makes such assumption and releases the TD,\nallowing the remaining TRBs to be freed or overwritten by new TDs.\n\nThe xHC should also report completion of the final TRB due to its IOC\nflag being set by us, regardless of prior errors. This event cannot\nbe recognized if the TD has already been freed earlier, resulting in\n\"Transfer event TRB DMA ptr not part of current TD\" error message.\n\nFix this by reusing the logic for processing isoc Transaction Errors.\nThis also handles hosts which fail to report the final completion.\n\nFix transfer length reporting on Babble errors. They may be caused by\ndevice malfunction, no guarantee that the buffer has been filled."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The buggy handler is reached by driving isochronous USB traffic from a local process \u2014 ALSA USB-audio, uvcvideo/V4L2, or raw usbfs `USBDEVFS_SUBMITURB` \u2014 on an already-attached device, with no physical access required. Consistent with the in-tree scoring of the analogous xhci isoc ring bugs (CVE-2025-37882, CVE-2025-22022).\nAC:L - `usb_submit_urb()` only bounds isoc frame lengths from above, so short isoc IN frames reliably provoke Isoch Buffer Overrun, and multi-TRB isoc TDs are the normal case for high-bandwidth SuperSpeed streams; the condition can be re-triggered every service interval. A malicious attached device can force babble deterministically.\nPR:L - Requires only an unprivileged local account with access to an isochronous USB endpoint (video/audio group membership or console-seat uaccess ACLs on /dev/bus/usb, /dev/video*, /dev/snd/*). No root or CAP_SYS_ADMIN is needed.\nUI:N - Once an isochronous-capable device is present, the attacker submits the URBs themselves; no victim action is required to trigger the premature TD giveback.\nS:U - The corruption and its impact are confined to the kernel\u0027s own memory and the xHCI host controller driver \u2014 the same security authority. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - The TD is released while the xHC still owns its remaining TRBs, so the controller keeps DMAing into a buffer that was given back and may be reallocated to another subsystem; that reallocated content is then reported back through the URB, and stale TRBs let the HC read reused memory \u2014 an arbitrary kernel-memory disclosure primitive.\nI:H - This is a use-after-free write: the xHC DMAs device-supplied data into freed/reallocated kernel memory, and freed TRB slots overwritten by new TDs let the controller act on torn TRBs with mismatched addresses and lengths, giving a corruption primitive leveragable for control-flow hijack.\nA:H - The missing final-TRB event produces \"Transfer event TRB DMA ptr not part of current TD\" and `-ESHUTDOWN`, desynchronizing driver and hardware and reaching `xhci_hc_died()`/`usb_hc_died()`, which kills every URB and all devices on the controller; the DMA-into-freed-memory and IOMMU-fault paths additionally cause kernel crashes."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:26:35.521Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/696e4112e5c1ee61996198f0ebb6ca3fab55166e"
        },
        {
          "url": "https://git.kernel.org/stable/c/2aa7bcfdbb46241c701811bbc0d64d7884e3346c"
        },
        {
          "url": "https://git.kernel.org/stable/c/2e3ec80ea7ba58bbb210e83b5a0afefee7c171d3"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5e7ffa9269a448a720e21f1ed1384d118298c97"
        },
        {
          "url": "https://git.kernel.org/stable/c/418456c0ce56209610523f21734c5612ee634134"
        },
        {
          "url": "https://git.kernel.org/stable/c/7c4650ded49e5b88929ecbbb631efb8b0838e811"
        }
      ],
      "title": "xhci: handle isoc Babble and Buffer Overrun events properly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26659",
    "datePublished": "2024-04-02T06:22:09.241Z",
    "dateReserved": "2024-02-19T14:20:24.147Z",
    "dateUpdated": "2026-10-15T00:38:24.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-26934 (GCVE-0-2024-26934)

Vulnerability from cvelistv5 – Published: 2024-05-01 05:17 – Updated: 2026-10-15 00:39

Title

USB: core: Fix deadlock in usb_deauthorize_interface()

Summary

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interface() Among the attribute file callback routines in drivers/usb/core/sysfs.c, the interface_authorized_store() function is the only one which acquires a device lock on an ancestor device: It calls usb_deauthorize_interface(), which locks the interface's parent USB device. The will lead to deadlock if another process already owns that lock and tries to remove the interface, whether through a configuration change or because the device has been disconnected. As part of the removal procedure, device_del() waits for all ongoing sysfs attribute callbacks to complete. But usb_deauthorize_interface() can't complete until the device lock has been released, and the lock won't be released until the removal has finished. The mechanism provided by sysfs to prevent this kind of deadlock is to use the sysfs_break_active_protection() function, which tells sysfs not to wait for the attribute callback. Reported-and-tested by: Yue Sun <samsun1006219@gmail.com> Reported by: xingwei lee <xrivendell7@gmail.com>

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-10 18:35 UTC

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6641 records in the last 180 days details

References

12 references

URL	Tags
https://git.kernel.org/stable/c/8cbdd324b41528994…
https://git.kernel.org/stable/c/12d6a5681a0a5cecc…
https://git.kernel.org/stable/c/e451709573f8be904…
https://git.kernel.org/stable/c/1b175bc579f46520b…
https://git.kernel.org/stable/c/ab062fa3dc69aea88…
https://git.kernel.org/stable/c/122a06f1068bf5e39…
https://git.kernel.org/stable/c/dbdf66250d2d33e8b…
https://git.kernel.org/stable/c/07acf979da33c7213…
https://git.kernel.org/stable/c/80ba43e9f799cbdd8…
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://lists.debian.org/debian-lts-announce/2024…	x_transferred
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 8cbdd324b41528994027128207fae8100dff094f (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 12d6a5681a0a5cecc2af7860f0a1613fa7c6e947 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < e451709573f8be904a8a72d0775bf114d7c291d9 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 1b175bc579f46520b11ecda443bcd2ee4904f66a (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < ab062fa3dc69aea88fe62162c5881ba14b50ecc5 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 122a06f1068bf5e39089863f4f60b1f5d4273384 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < dbdf66250d2d33e8b27352fcb901de79f3521057 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 07acf979da33c721357ff27129edf74c23c036c6 (git) Affected: 310d2b4124c073a2057ef9d952d4d938e9b1dfd9 , < 80ba43e9f799cbdd83842fc27db667289b3150f5 (git)
Linux	Linux	Affected: 4.4 Unaffected: 0 , < 4.4 (semver) Unaffected: 4.19.312 , ≤ 4.19.* (semver) Unaffected: 5.4.274 , ≤ 5.4.* (semver) Unaffected: 5.10.215 , ≤ 5.10.* (semver) Unaffected: 5.15.154 , ≤ 5.15.* (semver) Unaffected: 6.1.84 , ≤ 6.1.* (semver) Unaffected: 6.6.24 , ≤ 6.6.* (semver) Unaffected: 6.7.12 , ≤ 6.7.* (semver) Unaffected: 6.8.3 , ≤ 6.8.* (semver) Unaffected: 6.9 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < V1.1.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26934",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-10T18:35:35.947702Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:21:30.301Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:21:05.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8cbdd324b41528994027128207fae8100dff094f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/12d6a5681a0a5cecc2af7860f0a1613fa7c6e947"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e451709573f8be904a8a72d0775bf114d7c291d9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1b175bc579f46520b11ecda443bcd2ee4904f66a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ab062fa3dc69aea88fe62162c5881ba14b50ecc5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/122a06f1068bf5e39089863f4f60b1f5d4273384"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/dbdf66250d2d33e8b27352fcb901de79f3521057"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/07acf979da33c721357ff27129edf74c23c036c6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/80ba43e9f799cbdd83842fc27db667289b3150f5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T00:39:27.487Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/core/sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8cbdd324b41528994027128207fae8100dff094f",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "12d6a5681a0a5cecc2af7860f0a1613fa7c6e947",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "e451709573f8be904a8a72d0775bf114d7c291d9",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "1b175bc579f46520b11ecda443bcd2ee4904f66a",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "ab062fa3dc69aea88fe62162c5881ba14b50ecc5",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "122a06f1068bf5e39089863f4f60b1f5d4273384",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "dbdf66250d2d33e8b27352fcb901de79f3521057",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "07acf979da33c721357ff27129edf74c23c036c6",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            },
            {
              "lessThan": "80ba43e9f799cbdd83842fc27db667289b3150f5",
              "status": "affected",
              "version": "310d2b4124c073a2057ef9d952d4d938e9b1dfd9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/usb/core/sysfs.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "lessThan": "4.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.312",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.274",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.215",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.154",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.84",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.24",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.312",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.274",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.215",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.154",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.84",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.24",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.12",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.3",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "4.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Fix deadlock in usb_deauthorize_interface()\n\nAmong the attribute file callback routines in\ndrivers/usb/core/sysfs.c, the interface_authorized_store() function is\nthe only one which acquires a device lock on an ancestor device: It\ncalls usb_deauthorize_interface(), which locks the interface\u0027s parent\nUSB device.\n\nThe will lead to deadlock if another process already owns that lock\nand tries to remove the interface, whether through a configuration\nchange or because the device has been disconnected.  As part of the\nremoval procedure, device_del() waits for all ongoing sysfs attribute\ncallbacks to complete.  But usb_deauthorize_interface() can\u0027t complete\nuntil the device lock has been released, and the lock won\u0027t be\nreleased until the removal has finished.\n\nThe mechanism provided by sysfs to prevent this kind of deadlock is\nto use the sysfs_break_active_protection() function, which tells sysfs\nnot to wait for the attribute callback.\n\nReported-and-tested by: Yue Sun \u003csamsun1006219@gmail.com\u003e\nReported by: xingwei lee \u003cxrivendell7@gmail.com\u003e"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:07:11.924Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8cbdd324b41528994027128207fae8100dff094f"
        },
        {
          "url": "https://git.kernel.org/stable/c/12d6a5681a0a5cecc2af7860f0a1613fa7c6e947"
        },
        {
          "url": "https://git.kernel.org/stable/c/e451709573f8be904a8a72d0775bf114d7c291d9"
        },
        {
          "url": "https://git.kernel.org/stable/c/1b175bc579f46520b11ecda443bcd2ee4904f66a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ab062fa3dc69aea88fe62162c5881ba14b50ecc5"
        },
        {
          "url": "https://git.kernel.org/stable/c/122a06f1068bf5e39089863f4f60b1f5d4273384"
        },
        {
          "url": "https://git.kernel.org/stable/c/dbdf66250d2d33e8b27352fcb901de79f3521057"
        },
        {
          "url": "https://git.kernel.org/stable/c/07acf979da33c721357ff27129edf74c23c036c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/80ba43e9f799cbdd83842fc27db667289b3150f5"
        }
      ],
      "title": "USB: core: Fix deadlock in usb_deauthorize_interface()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26934",
    "datePublished": "2024-05-01T05:17:27.352Z",
    "dateReserved": "2024-02-19T14:20:24.196Z",
    "dateUpdated": "2026-10-15T00:39:27.487Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2025:13135

BDU:2026-03966 (CVE-2022-49788)

CVE-2021-47527 (GCVE-0-2021-47527)

CVE-2022-48669 (GCVE-0-2022-48669)

CVE-2022-49395 (GCVE-0-2022-49395)

CVE-2022-49788 (GCVE-0-2022-49788)

CVE-2023-52451 (GCVE-0-2023-52451)

CVE-2023-52764 (GCVE-0-2023-52764)

CVE-2023-52877 (GCVE-0-2023-52877)

CVE-2024-26659 (GCVE-0-2024-26659)

CVE-2024-26934 (GCVE-0-2024-26934)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour