Vulnerability-Lookup

CERTFR-2026-AVI-0495

Vulnerability from certfr_avis - Published: 2026-04-24 - Updated: 2026-04-24

De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Ubuntu	Ubuntu	Ubuntu 20.04 ESM
Ubuntu	Ubuntu	Ubuntu 24.04 LTS
Ubuntu	Ubuntu	Ubuntu 18.04 ESM
Ubuntu	Ubuntu	Ubuntu 25.10
Ubuntu	Ubuntu	Ubuntu 22.04 LTS

References

Title

Publication Time

Tags

Bulletin de sécurité Ubuntu USN-8180-5	2026-04-24	vendor-advisory
Bulletin de sécurité Ubuntu USN-8183-2	2026-04-23	vendor-advisory
Bulletin de sécurité Ubuntu USN-8098-10	2026-04-20	vendor-advisory
Bulletin de sécurité Ubuntu USN-8201-1	2026-04-22	vendor-advisory
Bulletin de sécurité Ubuntu USN-8179-3	2026-04-23	vendor-advisory
Bulletin de sécurité Ubuntu USN-8203-1	2026-04-23	vendor-advisory
Bulletin de sécurité Ubuntu USN-8180-4	2026-04-23	vendor-advisory
Bulletin de sécurité Ubuntu USN-8200-1	2026-04-22	vendor-advisory
Bulletin de sécurité Ubuntu USN-8204-1	2026-04-23	vendor-advisory
Bulletin de sécurité Ubuntu USN-8200-2	2026-04-22	vendor-advisory
Bulletin de sécurité Ubuntu USN-8180-3	2026-04-23	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Ubuntu 20.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 24.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 18.04 ESM",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 25.10",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    },
    {
      "description": "Ubuntu 22.04 LTS",
      "product": {
        "name": "Ubuntu",
        "vendor": {
          "name": "Ubuntu",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-71075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71075"
    },
    {
      "name": "CVE-2025-68805",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68805"
    },
    {
      "name": "CVE-2025-71086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71086"
    },
    {
      "name": "CVE-2026-23167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23167"
    },
    {
      "name": "CVE-2025-71065",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71065"
    },
    {
      "name": "CVE-2025-68374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68374"
    },
    {
      "name": "CVE-2026-23098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23098"
    },
    {
      "name": "CVE-2025-68793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68793"
    },
    {
      "name": "CVE-2025-71094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71094"
    },
    {
      "name": "CVE-2025-68788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68788"
    },
    {
      "name": "CVE-2025-68778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68778"
    },
    {
      "name": "CVE-2025-71064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71064"
    },
    {
      "name": "CVE-2025-68736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68736"
    },
    {
      "name": "CVE-2025-68725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68725"
    },
    {
      "name": "CVE-2025-68741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68741"
    },
    {
      "name": "CVE-2025-68795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68795"
    },
    {
      "name": "CVE-2025-68349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68349"
    },
    {
      "name": "CVE-2025-68380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68380"
    },
    {
      "name": "CVE-2026-23269",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23269"
    },
    {
      "name": "CVE-2021-47599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-47599"
    },
    {
      "name": "CVE-2023-53421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53421"
    },
    {
      "name": "CVE-2025-71071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71071"
    },
    {
      "name": "CVE-2025-71191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71191"
    },
    {
      "name": "CVE-2025-68728",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68728"
    },
    {
      "name": "CVE-2025-68364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68364"
    },
    {
      "name": "CVE-2025-71087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71087"
    },
    {
      "name": "CVE-2025-71135",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71135"
    },
    {
      "name": "CVE-2025-68746",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68746"
    },
    {
      "name": "CVE-2025-68773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68773"
    },
    {
      "name": "CVE-2025-71133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71133"
    },
    {
      "name": "CVE-2025-68796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68796"
    },
    {
      "name": "CVE-2025-68804",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68804"
    },
    {
      "name": "CVE-2025-68769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68769"
    },
    {
      "name": "CVE-2025-68794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68794"
    },
    {
      "name": "CVE-2025-38408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38408"
    },
    {
      "name": "CVE-2025-71088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71088"
    },
    {
      "name": "CVE-2026-23090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23090"
    },
    {
      "name": "CVE-2026-23064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23064"
    },
    {
      "name": "CVE-2025-38591",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38591"
    },
    {
      "name": "CVE-2025-68806",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68806"
    },
    {
      "name": "CVE-2025-71098",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71098"
    },
    {
      "name": "CVE-2025-71078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71078"
    },
    {
      "name": "CVE-2025-71083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71083"
    },
    {
      "name": "CVE-2026-23061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23061"
    },
    {
      "name": "CVE-2025-68813",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68813"
    },
    {
      "name": "CVE-2025-68365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68365"
    },
    {
      "name": "CVE-2025-68265",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68265"
    },
    {
      "name": "CVE-2026-23119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23119"
    },
    {
      "name": "CVE-2025-71085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71085"
    },
    {
      "name": "CVE-2026-23268",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23268"
    },
    {
      "name": "CVE-2025-71076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71076"
    },
    {
      "name": "CVE-2025-68344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68344"
    },
    {
      "name": "CVE-2025-71154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71154"
    },
    {
      "name": "CVE-2022-49046",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49046"
    },
    {
      "name": "CVE-2025-68257",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68257"
    },
    {
      "name": "CVE-2024-46816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-46816"
    },
    {
      "name": "CVE-2025-71084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71084"
    },
    {
      "name": "CVE-2026-23049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23049"
    },
    {
      "name": "CVE-2025-68347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68347"
    },
    {
      "name": "CVE-2025-68770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68770"
    },
    {
      "name": "CVE-2025-68814",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68814"
    },
    {
      "name": "CVE-2025-68780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68780"
    },
    {
      "name": "CVE-2025-71081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71081"
    },
    {
      "name": "CVE-2026-23101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23101"
    },
    {
      "name": "CVE-2026-23407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23407"
    },
    {
      "name": "CVE-2026-23099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23099"
    },
    {
      "name": "CVE-2025-71121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71121"
    },
    {
      "name": "CVE-2025-38022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38022"
    },
    {
      "name": "CVE-2025-71080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71080"
    },
    {
      "name": "CVE-2023-53520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53520"
    },
    {
      "name": "CVE-2026-23085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23085"
    },
    {
      "name": "CVE-2026-23209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23209"
    },
    {
      "name": "CVE-2025-71136",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71136"
    },
    {
      "name": "CVE-2025-68354",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68354"
    },
    {
      "name": "CVE-2025-68801",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68801"
    },
    {
      "name": "CVE-2026-23150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23150"
    },
    {
      "name": "CVE-2025-71073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71073"
    },
    {
      "name": "CVE-2025-68258",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68258"
    },
    {
      "name": "CVE-2025-71138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71138"
    },
    {
      "name": "CVE-2025-68291",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68291"
    },
    {
      "name": "CVE-2025-71117",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71117"
    },
    {
      "name": "CVE-2025-71122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71122"
    },
    {
      "name": "CVE-2025-68763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68763"
    },
    {
      "name": "CVE-2025-71144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71144"
    },
    {
      "name": "CVE-2025-68822",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68822"
    },
    {
      "name": "CVE-2025-68368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68368"
    },
    {
      "name": "CVE-2025-38234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38234"
    },
    {
      "name": "CVE-2025-68255",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68255"
    },
    {
      "name": "CVE-2025-68791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68791"
    },
    {
      "name": "CVE-2026-23133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23133"
    },
    {
      "name": "CVE-2026-23406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23406"
    },
    {
      "name": "CVE-2025-71093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71093"
    },
    {
      "name": "CVE-2025-71102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71102"
    },
    {
      "name": "CVE-2026-23170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23170"
    },
    {
      "name": "CVE-2025-68759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68759"
    },
    {
      "name": "CVE-2025-71188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71188"
    },
    {
      "name": "CVE-2026-23125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23125"
    },
    {
      "name": "CVE-2025-38057",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38057"
    },
    {
      "name": "CVE-2025-68733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68733"
    },
    {
      "name": "CVE-2025-68335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68335"
    },
    {
      "name": "CVE-2025-71079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71079"
    },
    {
      "name": "CVE-2026-22997",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22997"
    },
    {
      "name": "CVE-2025-71153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71153"
    },
    {
      "name": "CVE-2023-53662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-53662"
    },
    {
      "name": "CVE-2025-71196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71196"
    },
    {
      "name": "CVE-2025-68772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68772"
    },
    {
      "name": "CVE-2024-57795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-57795"
    },
    {
      "name": "CVE-2025-21780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-21780"
    },
    {
      "name": "CVE-2026-23078",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23078"
    },
    {
      "name": "CVE-2025-71143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71143"
    },
    {
      "name": "CVE-2025-68768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68768"
    },
    {
      "name": "CVE-2025-68785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68785"
    },
    {
      "name": "CVE-2025-71130",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71130"
    },
    {
      "name": "CVE-2025-68808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68808"
    },
    {
      "name": "CVE-2025-68783",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68783"
    },
    {
      "name": "CVE-2025-71147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71147"
    },
    {
      "name": "CVE-2025-68724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68724"
    },
    {
      "name": "CVE-2026-23103",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23103"
    },
    {
      "name": "CVE-2022-48875",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-48875"
    },
    {
      "name": "CVE-2026-23074",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23074"
    },
    {
      "name": "CVE-2025-71126",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71126"
    },
    {
      "name": "CVE-2025-68786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68786"
    },
    {
      "name": "CVE-2025-71199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71199"
    },
    {
      "name": "CVE-2025-68797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68797"
    },
    {
      "name": "CVE-2025-68259",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68259"
    },
    {
      "name": "CVE-2025-71125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71125"
    },
    {
      "name": "CVE-2025-71108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71108"
    },
    {
      "name": "CVE-2025-71069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71069"
    },
    {
      "name": "CVE-2025-68807",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68807"
    },
    {
      "name": "CVE-2026-23083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23083"
    },
    {
      "name": "CVE-2025-68774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68774"
    },
    {
      "name": "CVE-2026-23108",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23108"
    },
    {
      "name": "CVE-2025-38232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38232"
    },
    {
      "name": "CVE-2025-71194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71194"
    },
    {
      "name": "CVE-2025-71157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71157"
    },
    {
      "name": "CVE-2026-22999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22999"
    },
    {
      "name": "CVE-2025-71082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71082"
    },
    {
      "name": "CVE-2025-68765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68765"
    },
    {
      "name": "CVE-2026-23089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23089"
    },
    {
      "name": "CVE-2025-71132",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71132"
    },
    {
      "name": "CVE-2026-23071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23071"
    },
    {
      "name": "CVE-2026-23056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23056"
    },
    {
      "name": "CVE-2025-71077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71077"
    },
    {
      "name": "CVE-2025-71140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71140"
    },
    {
      "name": "CVE-2025-22111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22111"
    },
    {
      "name": "CVE-2026-23063",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23063"
    },
    {
      "name": "CVE-2026-23073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23073"
    },
    {
      "name": "CVE-2025-71114",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71114"
    },
    {
      "name": "CVE-2026-23058",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23058"
    },
    {
      "name": "CVE-2025-71067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71067"
    },
    {
      "name": "CVE-2025-68744",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68744"
    },
    {
      "name": "CVE-2026-23038",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23038"
    },
    {
      "name": "CVE-2025-71151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71151"
    },
    {
      "name": "CVE-2025-68353",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68353"
    },
    {
      "name": "CVE-2025-71186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71186"
    },
    {
      "name": "CVE-2025-68821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68821"
    },
    {
      "name": "CVE-2026-23026",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23026"
    },
    {
      "name": "CVE-2026-23128",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23128"
    },
    {
      "name": "CVE-2025-68325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68325"
    },
    {
      "name": "CVE-2025-71190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71190"
    },
    {
      "name": "CVE-2025-71089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71089"
    },
    {
      "name": "CVE-2025-68332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68332"
    },
    {
      "name": "CVE-2025-68745",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68745"
    },
    {
      "name": "CVE-2025-71104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71104"
    },
    {
      "name": "CVE-2025-68378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68378"
    },
    {
      "name": "CVE-2025-71141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71141"
    },
    {
      "name": "CVE-2026-23146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23146"
    },
    {
      "name": "CVE-2026-23037",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23037"
    },
    {
      "name": "CVE-2026-23410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23410"
    },
    {
      "name": "CVE-2025-71101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71101"
    },
    {
      "name": "CVE-2026-23001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23001"
    },
    {
      "name": "CVE-2025-68367",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68367"
    },
    {
      "name": "CVE-2025-68820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68820"
    },
    {
      "name": "CVE-2025-68756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68756"
    },
    {
      "name": "CVE-2023-54207",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-54207"
    },
    {
      "name": "CVE-2025-68740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68740"
    },
    {
      "name": "CVE-2025-68742",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68742"
    },
    {
      "name": "CVE-2025-68816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68816"
    },
    {
      "name": "CVE-2025-71070",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71070"
    },
    {
      "name": "CVE-2025-68379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68379"
    },
    {
      "name": "CVE-2025-68256",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68256"
    },
    {
      "name": "CVE-2025-68777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68777"
    },
    {
      "name": "CVE-2025-68254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68254"
    },
    {
      "name": "CVE-2025-71109",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71109"
    },
    {
      "name": "CVE-2025-71118",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71118"
    },
    {
      "name": "CVE-2025-71150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71150"
    },
    {
      "name": "CVE-2026-23091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23091"
    },
    {
      "name": "CVE-2026-23121",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23121"
    },
    {
      "name": "CVE-2025-68776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68776"
    },
    {
      "name": "CVE-2025-71066",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71066"
    },
    {
      "name": "CVE-2025-68799",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68799"
    },
    {
      "name": "CVE-2025-68345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68345"
    },
    {
      "name": "CVE-2025-71097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71097"
    },
    {
      "name": "CVE-2025-71107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71107"
    },
    {
      "name": "CVE-2025-71111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71111"
    },
    {
      "name": "CVE-2026-23087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23087"
    },
    {
      "name": "CVE-2025-68802",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68802"
    },
    {
      "name": "CVE-2025-71185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71185"
    },
    {
      "name": "CVE-2025-68811",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68811"
    },
    {
      "name": "CVE-2026-23096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23096"
    },
    {
      "name": "CVE-2025-68337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68337"
    },
    {
      "name": "CVE-2025-68351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68351"
    },
    {
      "name": "CVE-2026-23405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23405"
    },
    {
      "name": "CVE-2025-71131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71131"
    },
    {
      "name": "CVE-2025-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40149"
    },
    {
      "name": "CVE-2026-23403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23403"
    },
    {
      "name": "CVE-2025-40164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40164"
    },
    {
      "name": "CVE-2026-23164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23164"
    },
    {
      "name": "CVE-2025-71116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71116"
    },
    {
      "name": "CVE-2026-23124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23124"
    },
    {
      "name": "CVE-2025-68362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68362"
    },
    {
      "name": "CVE-2025-71162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71162"
    },
    {
      "name": "CVE-2026-23075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23075"
    },
    {
      "name": "CVE-2026-23120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23120"
    },
    {
      "name": "CVE-2025-68803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68803"
    },
    {
      "name": "CVE-2026-23105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23105"
    },
    {
      "name": "CVE-2025-71115",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71115"
    },
    {
      "name": "CVE-2025-68753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68753"
    },
    {
      "name": "CVE-2025-68781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68781"
    },
    {
      "name": "CVE-2025-68369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68369"
    },
    {
      "name": "CVE-2025-68775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68775"
    },
    {
      "name": "CVE-2025-71112",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71112"
    },
    {
      "name": "CVE-2025-22022",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-22022"
    },
    {
      "name": "CVE-2025-68818",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68818"
    },
    {
      "name": "CVE-2025-38125",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-38125"
    },
    {
      "name": "CVE-2025-71148",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71148"
    },
    {
      "name": "CVE-2025-68366",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68366"
    },
    {
      "name": "CVE-2024-36347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-36347"
    },
    {
      "name": "CVE-2025-68815",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68815"
    },
    {
      "name": "CVE-2025-40215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40215"
    },
    {
      "name": "CVE-2026-23095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23095"
    },
    {
      "name": "CVE-2025-68346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68346"
    },
    {
      "name": "CVE-2025-71163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71163"
    },
    {
      "name": "CVE-2022-49072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-49072"
    },
    {
      "name": "CVE-2025-71096",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71096"
    },
    {
      "name": "CVE-2025-71099",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71099"
    },
    {
      "name": "CVE-2025-71095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71095"
    },
    {
      "name": "CVE-2025-71105",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71105"
    },
    {
      "name": "CVE-2025-68266",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68266"
    },
    {
      "name": "CVE-2025-68771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68771"
    },
    {
      "name": "CVE-2025-68363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68363"
    },
    {
      "name": "CVE-2026-23411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23411"
    },
    {
      "name": "CVE-2024-49927",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-49927"
    },
    {
      "name": "CVE-2025-68757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68757"
    },
    {
      "name": "CVE-2025-71068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71068"
    },
    {
      "name": "CVE-2026-23033",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23033"
    },
    {
      "name": "CVE-2026-23409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23409"
    },
    {
      "name": "CVE-2025-68784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68784"
    },
    {
      "name": "CVE-2026-23145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23145"
    },
    {
      "name": "CVE-2026-23003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23003"
    },
    {
      "name": "CVE-2025-68766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68766"
    },
    {
      "name": "CVE-2026-23076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23076"
    },
    {
      "name": "CVE-2025-68792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68792"
    },
    {
      "name": "CVE-2025-68823",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68823"
    },
    {
      "name": "CVE-2025-71123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71123"
    },
    {
      "name": "CVE-2025-68206",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68206"
    },
    {
      "name": "CVE-2025-71124",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71124"
    },
    {
      "name": "CVE-2025-71100",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71100"
    },
    {
      "name": "CVE-2025-68372",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68372"
    },
    {
      "name": "CVE-2026-23404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23404"
    },
    {
      "name": "CVE-2025-71146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71146"
    },
    {
      "name": "CVE-2025-71137",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71137"
    },
    {
      "name": "CVE-2026-23084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23084"
    },
    {
      "name": "CVE-2026-23011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23011"
    },
    {
      "name": "CVE-2025-71156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71156"
    },
    {
      "name": "CVE-2025-68809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68809"
    },
    {
      "name": "CVE-2025-71120",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71120"
    },
    {
      "name": "CVE-2026-23060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23060"
    },
    {
      "name": "CVE-2025-68817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68817"
    },
    {
      "name": "CVE-2025-71119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71119"
    },
    {
      "name": "CVE-2025-68787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68787"
    },
    {
      "name": "CVE-2025-68782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68782"
    },
    {
      "name": "CVE-2025-71197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71197"
    },
    {
      "name": "CVE-2025-68758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68758"
    },
    {
      "name": "CVE-2025-71113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71113"
    },
    {
      "name": "CVE-2025-71127",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71127"
    },
    {
      "name": "CVE-2026-22998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-22998"
    },
    {
      "name": "CVE-2025-68340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68340"
    },
    {
      "name": "CVE-2026-23111",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23111"
    },
    {
      "name": "CVE-2025-40325",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-40325"
    },
    {
      "name": "CVE-2025-68798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68798"
    },
    {
      "name": "CVE-2025-68336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68336"
    },
    {
      "name": "CVE-2025-68810",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68810"
    },
    {
      "name": "CVE-2026-23097",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23097"
    },
    {
      "name": "CVE-2025-68819",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68819"
    },
    {
      "name": "CVE-2025-71072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71072"
    },
    {
      "name": "CVE-2025-68732",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68732"
    },
    {
      "name": "CVE-2026-23093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23093"
    },
    {
      "name": "CVE-2025-37849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-37849"
    },
    {
      "name": "CVE-2024-56640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-56640"
    },
    {
      "name": "CVE-2025-68371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68371"
    },
    {
      "name": "CVE-2025-68211",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68211"
    },
    {
      "name": "CVE-2025-71091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71091"
    },
    {
      "name": "CVE-2025-68263",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68263"
    },
    {
      "name": "CVE-2025-68800",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68800"
    },
    {
      "name": "CVE-2025-68261",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68261"
    },
    {
      "name": "CVE-2025-68755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68755"
    },
    {
      "name": "CVE-2025-71149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-71149"
    },
    {
      "name": "CVE-2025-68767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68767"
    },
    {
      "name": "CVE-2025-68727",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68727"
    },
    {
      "name": "CVE-2026-23080",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23080"
    },
    {
      "name": "CVE-2025-68264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68264"
    },
    {
      "name": "CVE-2025-68764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-68764"
    }
  ],
  "initial_release_date": "2026-04-24T00:00:00",
  "last_revision_date": "2026-04-24T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0495",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-04-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux d\u0027Ubuntu. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux d\u0027Ubuntu",
  "vendor_advisories": [
    {
      "published_at": "2026-04-24",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8180-5",
      "url": "https://ubuntu.com/security/notices/USN-8180-5"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8183-2",
      "url": "https://ubuntu.com/security/notices/USN-8183-2"
    },
    {
      "published_at": "2026-04-20",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8098-10",
      "url": "https://ubuntu.com/security/notices/USN-8098-10"
    },
    {
      "published_at": "2026-04-22",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8201-1",
      "url": "https://ubuntu.com/security/notices/USN-8201-1"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8179-3",
      "url": "https://ubuntu.com/security/notices/USN-8179-3"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8203-1",
      "url": "https://ubuntu.com/security/notices/USN-8203-1"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8180-4",
      "url": "https://ubuntu.com/security/notices/USN-8180-4"
    },
    {
      "published_at": "2026-04-22",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8200-1",
      "url": "https://ubuntu.com/security/notices/USN-8200-1"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8204-1",
      "url": "https://ubuntu.com/security/notices/USN-8204-1"
    },
    {
      "published_at": "2026-04-22",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8200-2",
      "url": "https://ubuntu.com/security/notices/USN-8200-2"
    },
    {
      "published_at": "2026-04-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Ubuntu USN-8180-3",
      "url": "https://ubuntu.com/security/notices/USN-8180-3"
    }
  ]
}

CVE-2021-47599 (GCVE-0-2021-47599)

Vulnerability from cvelistv5 – Published: 2024-06-19 14:54 – Updated: 2026-05-23 15:20

Title

btrfs: use latest_dev in btrfs_show_devname

Summary

In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs] CPU: 2 PID: 1 Comm: systemd Tainted: G W O 5.14.0-rc1-custom #72 Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 Call trace: btrfs_show_devname+0x108/0x1b4 [btrfs] show_mountinfo+0x234/0x2c4 m_show+0x28/0x34 seq_read_iter+0x12c/0x3c4 vfs_read+0x29c/0x2c8 ksys_read+0x80/0xec __arm64_sys_read+0x28/0x34 invoke_syscall+0x50/0xf8 do_el0_svc+0x88/0x138 el0_svc+0x2c/0x8c el0t_64_sync_handler+0x84/0xe4 el0t_64_sync+0x198/0x19c Reason: While btrfs_prepare_sprout() moves the fs_devices::devices into fs_devices::seed_list, the btrfs_show_devname() searches for the devices and found none, leading to the warning as in above. Fix: latest_dev is updated according to the changes to the device list. That means we could use the latest_dev->name to show the device name in /proc/self/mounts, the pointer will be always valid as it's assigned before the device is deleted from the list in remove or replace. The RCU protection is sufficient as the device structure is freed after synchronization.

Severity

No CVSS data available.

Assigner

Linux

References

2 references

URL	Tags
https://git.kernel.org/stable/c/e342c2558016ead46…
https://git.kernel.org/stable/c/6605fd2f394bba0a0…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 4faf55b03823e96c44dc4e364520000ed3b12fdb , < e342c2558016ead462f376b6c6c2ac5efc17f3b1 (git) Affected: 4faf55b03823e96c44dc4e364520000ed3b12fdb , < 6605fd2f394bba0a0059df2b6cfc87b0b6d393a2 (git) Affected: fa511954694cbea4d0cb59c81c8670276920c08c (git) Affected: 3d3452920cacc3a46444ecca26af5d181410ff19 (git) Affected: ca21728e18d34fd5f449bb0581160e0eaee498a6 (git) Affected: 1c986b7e8c1bf8fabbc294036b003286cc3a8c7e (git) Affected: 4.19.141 , < 4.20 (semver) Affected: 5.4.60 , < 5.5 (semver) Affected: 5.7.17 , < 5.8 (semver) Affected: 5.8.3 , < 5.9 (semver)
Linux	Linux	Affected: 5.9 Unaffected: 0 , < 5.9 (semver) Unaffected: 5.15.11 , ≤ 5.15.* (semver) Unaffected: 5.16 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:47:39.508Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e342c2558016ead462f376b6c6c2ac5efc17f3b1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6605fd2f394bba0a0059df2b6cfc87b0b6d393a2"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47599",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:12:17.610471Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:51.794Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e342c2558016ead462f376b6c6c2ac5efc17f3b1",
              "status": "affected",
              "version": "4faf55b03823e96c44dc4e364520000ed3b12fdb",
              "versionType": "git"
            },
            {
              "lessThan": "6605fd2f394bba0a0059df2b6cfc87b0b6d393a2",
              "status": "affected",
              "version": "4faf55b03823e96c44dc4e364520000ed3b12fdb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fa511954694cbea4d0cb59c81c8670276920c08c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3d3452920cacc3a46444ecca26af5d181410ff19",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ca21728e18d34fd5f449bb0581160e0eaee498a6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1c986b7e8c1bf8fabbc294036b003286cc3a8c7e",
              "versionType": "git"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.141",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.60",
              "versionType": "semver"
            },
            {
              "lessThan": "5.8",
              "status": "affected",
              "version": "5.7.17",
              "versionType": "semver"
            },
            {
              "lessThan": "5.9",
              "status": "affected",
              "version": "5.8.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.9"
            },
            {
              "lessThan": "5.9",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.11",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "versionStartIncluding": "5.9",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.141",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.60",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.7.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.8.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: use latest_dev in btrfs_show_devname\n\nThe test case btrfs/238 reports the warning below:\n\n WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs]\n CPU: 2 PID: 1 Comm: systemd Tainted: G        W  O 5.14.0-rc1-custom #72\n Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015\n Call trace:\n   btrfs_show_devname+0x108/0x1b4 [btrfs]\n   show_mountinfo+0x234/0x2c4\n   m_show+0x28/0x34\n   seq_read_iter+0x12c/0x3c4\n   vfs_read+0x29c/0x2c8\n   ksys_read+0x80/0xec\n   __arm64_sys_read+0x28/0x34\n   invoke_syscall+0x50/0xf8\n   do_el0_svc+0x88/0x138\n   el0_svc+0x2c/0x8c\n   el0t_64_sync_handler+0x84/0xe4\n   el0t_64_sync+0x198/0x19c\n\nReason:\nWhile btrfs_prepare_sprout() moves the fs_devices::devices into\nfs_devices::seed_list, the btrfs_show_devname() searches for the devices\nand found none, leading to the warning as in above.\n\nFix:\nlatest_dev is updated according to the changes to the device list.\nThat means we could use the latest_dev-\u003ename to show the device name in\n/proc/self/mounts, the pointer will be always valid as it\u0027s assigned\nbefore the device is deleted from the list in remove or replace.\nThe RCU protection is sufficient as the device structure is freed after\nsynchronization."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:20:17.887Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e342c2558016ead462f376b6c6c2ac5efc17f3b1"
        },
        {
          "url": "https://git.kernel.org/stable/c/6605fd2f394bba0a0059df2b6cfc87b0b6d393a2"
        }
      ],
      "title": "btrfs: use latest_dev in btrfs_show_devname",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47599",
    "datePublished": "2024-06-19T14:54:00.272Z",
    "dateReserved": "2024-05-24T15:11:00.735Z",
    "dateUpdated": "2026-05-23T15:20:17.887Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-48875 (GCVE-0-2022-48875)

Vulnerability from cvelistv5 – Published: 2024-08-21 06:10 – Updated: 2026-05-11 18:48

Title

wifi: mac80211: sdata can be NULL during AMPDU start

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: sdata can be NULL during AMPDU start ieee80211_tx_ba_session_handle_start() may get NULL for sdata when a deauthentication is ongoing. Here a trace triggering the race with the hostapd test multi_ap_fronthaul_on_ap: (gdb) list *drv_ampdu_action+0x46 0x8b16 is in drv_ampdu_action (net/mac80211/driver-ops.c:396). 391 int ret = -EOPNOTSUPP; 392 393 might_sleep(); 394 395 sdata = get_bss_sdata(sdata); 396 if (!check_sdata_in_driver(sdata)) 397 return -EIO; 398 399 trace_drv_ampdu_action(local, sdata, params); 400 wlan0: moving STA 02:00:00:00:03:00 to state 3 wlan0: associated wlan0: deauthenticating from 02:00:00:00:03:00 by local choice (Reason: 3=DEAUTH_LEAVING) wlan3.sta1: Open BA session requested for 02:00:00:00:00:00 tid 0 wlan3.sta1: dropped frame to 02:00:00:00:00:00 (unauthorized port) wlan0: moving STA 02:00:00:00:03:00 to state 2 wlan0: moving STA 02:00:00:00:03:00 to state 1 wlan0: Removed STA 02:00:00:00:03:00 wlan0: Destroyed STA 02:00:00:00:03:00 BUG: unable to handle page fault for address: fffffffffffffb48 PGD 11814067 P4D 11814067 PUD 11816067 PMD 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 2 PID: 133397 Comm: kworker/u16:1 Tainted: G W 6.1.0-rc8-wt+ #59 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-20220807_005459-localhost 04/01/2014 Workqueue: phy3 ieee80211_ba_session_work [mac80211] RIP: 0010:drv_ampdu_action+0x46/0x280 [mac80211] Code: 53 48 89 f3 be 89 01 00 00 e8 d6 43 bf ef e8 21 46 81 f0 83 bb a0 1b 00 00 04 75 0e 48 8b 9b 28 0d 00 00 48 81 eb 10 0e 00 00 <8b> 93 58 09 00 00 f6 c2 20 0f 84 3b 01 00 00 8b 05 dd 1c 0f 00 85 RSP: 0018:ffffc900025ebd20 EFLAGS: 00010287 RAX: 0000000000000000 RBX: fffffffffffff1f0 RCX: ffff888102228240 RDX: 0000000080000000 RSI: ffffffff918c5de0 RDI: ffff888102228b40 RBP: ffffc900025ebd40 R08: 0000000000000001 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000000 R12: ffff888118c18ec0 R13: 0000000000000000 R14: ffffc900025ebd60 R15: ffff888018b7efb8 FS: 0000000000000000(0000) GS:ffff88817a600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: fffffffffffffb48 CR3: 0000000105228006 CR4: 0000000000170ee0 Call Trace: <TASK> ieee80211_tx_ba_session_handle_start+0xd0/0x190 [mac80211] ieee80211_ba_session_work+0xff/0x2e0 [mac80211] process_one_work+0x29f/0x620 worker_thread+0x4d/0x3d0 ? process_one_work+0x620/0x620 kthread+0xfb/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK>

Severity

No CVSS data available.

Assigner

Linux

References

4 references

URL	Tags
https://git.kernel.org/stable/c/187523fa7c2d4c780…
https://git.kernel.org/stable/c/a12fd43bd175fa52c…
https://git.kernel.org/stable/c/c838df8461a601b20…
https://git.kernel.org/stable/c/69403bad97aa0162e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 0ab337032a0dfcd5f2527d3306d3deeba5f95b59 , < 187523fa7c2d4c780f775cb869216865c4a909ef (git) Affected: 0ab337032a0dfcd5f2527d3306d3deeba5f95b59 , < a12fd43bd175fa52c82f9740179d38c34ca1b62e (git) Affected: 0ab337032a0dfcd5f2527d3306d3deeba5f95b59 , < c838df8461a601b20dc1b9fb1834d2aad8e2f949 (git) Affected: 0ab337032a0dfcd5f2527d3306d3deeba5f95b59 , < 69403bad97aa0162e3d7911b27e25abe774093df (git)
Linux	Linux	Affected: 2.6.36 Unaffected: 0 , < 2.6.36 (semver) Unaffected: 5.10.165 , ≤ 5.10.* (semver) Unaffected: 5.15.90 , ≤ 5.15.* (semver) Unaffected: 6.1.8 , ≤ 6.1.* (semver) Unaffected: 6.2 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48875",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:05:16.319547Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:32:53.565Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/agg-tx.c",
            "net/mac80211/driver-ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "187523fa7c2d4c780f775cb869216865c4a909ef",
              "status": "affected",
              "version": "0ab337032a0dfcd5f2527d3306d3deeba5f95b59",
              "versionType": "git"
            },
            {
              "lessThan": "a12fd43bd175fa52c82f9740179d38c34ca1b62e",
              "status": "affected",
              "version": "0ab337032a0dfcd5f2527d3306d3deeba5f95b59",
              "versionType": "git"
            },
            {
              "lessThan": "c838df8461a601b20dc1b9fb1834d2aad8e2f949",
              "status": "affected",
              "version": "0ab337032a0dfcd5f2527d3306d3deeba5f95b59",
              "versionType": "git"
            },
            {
              "lessThan": "69403bad97aa0162e3d7911b27e25abe774093df",
              "status": "affected",
              "version": "0ab337032a0dfcd5f2527d3306d3deeba5f95b59",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/agg-tx.c",
            "net/mac80211/driver-ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.36"
            },
            {
              "lessThan": "2.6.36",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.165",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.90",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.8",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "2.6.36",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: sdata can be NULL during AMPDU start\n\nieee80211_tx_ba_session_handle_start() may get NULL for sdata when a\ndeauthentication is ongoing.\n\nHere a trace triggering the race with the hostapd test\nmulti_ap_fronthaul_on_ap:\n\n(gdb) list *drv_ampdu_action+0x46\n0x8b16 is in drv_ampdu_action (net/mac80211/driver-ops.c:396).\n391             int ret = -EOPNOTSUPP;\n392\n393             might_sleep();\n394\n395             sdata = get_bss_sdata(sdata);\n396             if (!check_sdata_in_driver(sdata))\n397                     return -EIO;\n398\n399             trace_drv_ampdu_action(local, sdata, params);\n400\n\nwlan0: moving STA 02:00:00:00:03:00 to state 3\nwlan0: associated\nwlan0: deauthenticating from 02:00:00:00:03:00 by local choice (Reason: 3=DEAUTH_LEAVING)\nwlan3.sta1: Open BA session requested for 02:00:00:00:00:00 tid 0\nwlan3.sta1: dropped frame to 02:00:00:00:00:00 (unauthorized port)\nwlan0: moving STA 02:00:00:00:03:00 to state 2\nwlan0: moving STA 02:00:00:00:03:00 to state 1\nwlan0: Removed STA 02:00:00:00:03:00\nwlan0: Destroyed STA 02:00:00:00:03:00\nBUG: unable to handle page fault for address: fffffffffffffb48\nPGD 11814067 P4D 11814067 PUD 11816067 PMD 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 2 PID: 133397 Comm: kworker/u16:1 Tainted: G        W          6.1.0-rc8-wt+ #59\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-20220807_005459-localhost 04/01/2014\nWorkqueue: phy3 ieee80211_ba_session_work [mac80211]\nRIP: 0010:drv_ampdu_action+0x46/0x280 [mac80211]\nCode: 53 48 89 f3 be 89 01 00 00 e8 d6 43 bf ef e8 21 46 81 f0 83 bb a0 1b 00 00 04 75 0e 48 8b 9b 28 0d 00 00 48 81 eb 10 0e 00 00 \u003c8b\u003e 93 58 09 00 00 f6 c2 20 0f 84 3b 01 00 00 8b 05 dd 1c 0f 00 85\nRSP: 0018:ffffc900025ebd20 EFLAGS: 00010287\nRAX: 0000000000000000 RBX: fffffffffffff1f0 RCX: ffff888102228240\nRDX: 0000000080000000 RSI: ffffffff918c5de0 RDI: ffff888102228b40\nRBP: ffffc900025ebd40 R08: 0000000000000001 R09: 0000000000000001\nR10: 0000000000000001 R11: 0000000000000000 R12: ffff888118c18ec0\nR13: 0000000000000000 R14: ffffc900025ebd60 R15: ffff888018b7efb8\nFS:  0000000000000000(0000) GS:ffff88817a600000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: fffffffffffffb48 CR3: 0000000105228006 CR4: 0000000000170ee0\nCall Trace:\n \u003cTASK\u003e\n ieee80211_tx_ba_session_handle_start+0xd0/0x190 [mac80211]\n ieee80211_ba_session_work+0xff/0x2e0 [mac80211]\n process_one_work+0x29f/0x620\n worker_thread+0x4d/0x3d0\n ? process_one_work+0x620/0x620\n kthread+0xfb/0x120\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n \u003c/TASK\u003e"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T18:48:51.142Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/187523fa7c2d4c780f775cb869216865c4a909ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/a12fd43bd175fa52c82f9740179d38c34ca1b62e"
        },
        {
          "url": "https://git.kernel.org/stable/c/c838df8461a601b20dc1b9fb1834d2aad8e2f949"
        },
        {
          "url": "https://git.kernel.org/stable/c/69403bad97aa0162e3d7911b27e25abe774093df"
        }
      ],
      "title": "wifi: mac80211: sdata can be NULL during AMPDU start",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-48875",
    "datePublished": "2024-08-21T06:10:06.207Z",
    "dateReserved": "2024-07-16T11:38:08.922Z",
    "dateUpdated": "2026-05-11T18:48:51.142Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-49046 (GCVE-0-2022-49046)

Vulnerability from cvelistv5 – Published: 2025-02-26 01:54 – Updated: 2026-05-23 15:21

Title

i2c: dev: check return value when calling dev_set_name()

Summary

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_name() If dev_set_name() fails, the dev_name() is null, check the return value of dev_set_name() to avoid the null-ptr-deref.

Severity

No CVSS data available.

Assigner

Linux

References

4 references

URL	Tags
https://git.kernel.org/stable/c/2e539b17d4cbe5fb8…
https://git.kernel.org/stable/c/2f345bb14ad474495…
https://git.kernel.org/stable/c/c74d77a2d07744147…
https://git.kernel.org/stable/c/993eb48fa199b5f47…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1413ef638abae4ab5621901cf4d8ef08a4a48ba6 , < 2e539b17d4cbe5fb8b5152dd9a6e4a8828f97db2 (git) Affected: 1413ef638abae4ab5621901cf4d8ef08a4a48ba6 , < 2f345bb14ad4744950499ff222e2899209297afa (git) Affected: 1413ef638abae4ab5621901cf4d8ef08a4a48ba6 , < c74d77a2d07744147d734138acd6ce9dba715e5d (git) Affected: 1413ef638abae4ab5621901cf4d8ef08a4a48ba6 , < 993eb48fa199b5f476df8204e652eff63dd19361 (git) Affected: 1c1b4327970c79c1a2d0c3becfc12b9696177c55 (git) Affected: c0d34399045609eda76882fa6d01fdfaf5b20d38 (git) Affected: f1f3b4150baf7c3aa6b4e6b81b8ff1909996d507 (git) Affected: a612c4ece2eb757011ae88a8410b48e523220b8d (git) Affected: 1bed86cfe5cb4529d036a14980d379aee8539982 (git) Affected: 8a231148135d2d08a3ef721d438cd468ea4209d2 (git) Affected: 4.4.225 , < 4.5 (semver) Affected: 4.9.225 , < 4.10 (semver) Affected: 4.14.182 , < 4.15 (semver) Affected: 4.19.125 , < 4.20 (semver) Affected: 5.4.43 , < 5.5 (semver) Affected: 5.6.15 , < 5.7 (semver)
Linux	Linux	Affected: 5.7 Unaffected: 0 , < 5.7 (semver) Unaffected: 5.10.236 , ≤ 5.10.* (semver) Unaffected: 5.15.35 , ≤ 5.15.* (semver) Unaffected: 5.17.4 , ≤ 5.17.* (semver) Unaffected: 5.18 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:47.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/i2c-dev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2e539b17d4cbe5fb8b5152dd9a6e4a8828f97db2",
              "status": "affected",
              "version": "1413ef638abae4ab5621901cf4d8ef08a4a48ba6",
              "versionType": "git"
            },
            {
              "lessThan": "2f345bb14ad4744950499ff222e2899209297afa",
              "status": "affected",
              "version": "1413ef638abae4ab5621901cf4d8ef08a4a48ba6",
              "versionType": "git"
            },
            {
              "lessThan": "c74d77a2d07744147d734138acd6ce9dba715e5d",
              "status": "affected",
              "version": "1413ef638abae4ab5621901cf4d8ef08a4a48ba6",
              "versionType": "git"
            },
            {
              "lessThan": "993eb48fa199b5f476df8204e652eff63dd19361",
              "status": "affected",
              "version": "1413ef638abae4ab5621901cf4d8ef08a4a48ba6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1c1b4327970c79c1a2d0c3becfc12b9696177c55",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c0d34399045609eda76882fa6d01fdfaf5b20d38",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1f3b4150baf7c3aa6b4e6b81b8ff1909996d507",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a612c4ece2eb757011ae88a8410b48e523220b8d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1bed86cfe5cb4529d036a14980d379aee8539982",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8a231148135d2d08a3ef721d438cd468ea4209d2",
              "versionType": "git"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.225",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.225",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.182",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.125",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.43",
              "versionType": "semver"
            },
            {
              "lessThan": "5.7",
              "status": "affected",
              "version": "5.6.15",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/i2c/i2c-dev.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.236",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.236",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.35",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.4",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.225",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.225",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.182",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.125",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.43",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.6.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: dev: check return value when calling dev_set_name()\n\nIf dev_set_name() fails, the dev_name() is null, check the return\nvalue of dev_set_name() to avoid the null-ptr-deref."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:21:27.166Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2e539b17d4cbe5fb8b5152dd9a6e4a8828f97db2"
        },
        {
          "url": "https://git.kernel.org/stable/c/2f345bb14ad4744950499ff222e2899209297afa"
        },
        {
          "url": "https://git.kernel.org/stable/c/c74d77a2d07744147d734138acd6ce9dba715e5d"
        },
        {
          "url": "https://git.kernel.org/stable/c/993eb48fa199b5f476df8204e652eff63dd19361"
        }
      ],
      "title": "i2c: dev: check return value when calling dev_set_name()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49046",
    "datePublished": "2025-02-26T01:54:22.837Z",
    "dateReserved": "2025-02-26T01:49:39.242Z",
    "dateUpdated": "2026-05-23T15:21:27.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2022-49072 (GCVE-0-2022-49072)

Vulnerability from cvelistv5 – Published: 2025-02-26 01:54 – Updated: 2026-05-23 15:21

Title

gpio: Restrict usage of GPIO chip irq members before initialization

Summary

In the Linux kernel, the following vulnerability has been resolved: gpio: Restrict usage of GPIO chip irq members before initialization GPIO chip irq members are exposed before they could be completely initialized and this leads to race conditions. One such issue was observed for the gc->irq.domain variable which was accessed through the I2C interface in gpiochip_to_irq() before it could be initialized by gpiochip_add_irqchip(). This resulted in Kernel NULL pointer dereference. Following are the logs for reference :- kernel: Call Trace: kernel: gpiod_to_irq+0x53/0x70 kernel: acpi_dev_gpio_irq_get_by+0x113/0x1f0 kernel: i2c_acpi_get_irq+0xc0/0xd0 kernel: i2c_device_probe+0x28a/0x2a0 kernel: really_probe+0xf2/0x460 kernel: RIP: 0010:gpiochip_to_irq+0x47/0xc0 To avoid such scenarios, restrict usage of GPIO chip irq members before they are completely initialized.

Severity

No CVSS data available.

Assigner

Linux

References

5 references

URL	Tags
https://git.kernel.org/stable/c/7e88a50704b0c49ad…
https://git.kernel.org/stable/c/0912cf021fb574937…
https://git.kernel.org/stable/c/2c1fa3614795e2b24…
https://git.kernel.org/stable/c/f8dea54f74cae8c2e…
https://git.kernel.org/stable/c/5467801f1fcbdc46b…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 48057ed1840fde9239b1e000bea1a0a1f07c5e99 , < 7e88a50704b0c49ad3f2d11e8b963341cf68a89f (git) Affected: 48057ed1840fde9239b1e000bea1a0a1f07c5e99 , < 0912cf021fb5749372b3782611d8b1de4986c13a (git) Affected: 48057ed1840fde9239b1e000bea1a0a1f07c5e99 , < 2c1fa3614795e2b24da1ba95de0b27b8f6ea4537 (git) Affected: 48057ed1840fde9239b1e000bea1a0a1f07c5e99 , < f8dea54f74cae8c2e4d7b2952e8fed7743a85c87 (git) Affected: 48057ed1840fde9239b1e000bea1a0a1f07c5e99 , < 5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320 (git) Affected: 44dfa46aaf7cf594ac89bc1a0c0e56c498b31269 (git) Affected: 5.2.14 , < 5.3 (semver)
Linux	Linux	Affected: 5.3 Unaffected: 0 , < 5.3 (semver) Unaffected: 5.10.111 , ≤ 5.10.* (semver) Unaffected: 5.15.34 , ≤ 5.15.* (semver) Unaffected: 5.16.20 , ≤ 5.16.* (semver) Unaffected: 5.17.3 , ≤ 5.17.* (semver) Unaffected: 5.18 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpio/gpiolib.c",
            "include/linux/gpio/driver.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7e88a50704b0c49ad3f2d11e8b963341cf68a89f",
              "status": "affected",
              "version": "48057ed1840fde9239b1e000bea1a0a1f07c5e99",
              "versionType": "git"
            },
            {
              "lessThan": "0912cf021fb5749372b3782611d8b1de4986c13a",
              "status": "affected",
              "version": "48057ed1840fde9239b1e000bea1a0a1f07c5e99",
              "versionType": "git"
            },
            {
              "lessThan": "2c1fa3614795e2b24da1ba95de0b27b8f6ea4537",
              "status": "affected",
              "version": "48057ed1840fde9239b1e000bea1a0a1f07c5e99",
              "versionType": "git"
            },
            {
              "lessThan": "f8dea54f74cae8c2e4d7b2952e8fed7743a85c87",
              "status": "affected",
              "version": "48057ed1840fde9239b1e000bea1a0a1f07c5e99",
              "versionType": "git"
            },
            {
              "lessThan": "5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320",
              "status": "affected",
              "version": "48057ed1840fde9239b1e000bea1a0a1f07c5e99",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "44dfa46aaf7cf594ac89bc1a0c0e56c498b31269",
              "versionType": "git"
            },
            {
              "lessThan": "5.3",
              "status": "affected",
              "version": "5.2.14",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpio/gpiolib.c",
            "include/linux/gpio/driver.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "lessThan": "5.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.34",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.16.*",
              "status": "unaffected",
              "version": "5.16.20",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.17.*",
              "status": "unaffected",
              "version": "5.17.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.111",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.34",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16.20",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.17.3",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.2.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: Restrict usage of GPIO chip irq members before initialization\n\nGPIO chip irq members are exposed before they could be completely\ninitialized and this leads to race conditions.\n\nOne such issue was observed for the gc-\u003eirq.domain variable which\nwas accessed through the I2C interface in gpiochip_to_irq() before\nit could be initialized by gpiochip_add_irqchip(). This resulted in\nKernel NULL pointer dereference.\n\nFollowing are the logs for reference :-\n\nkernel: Call Trace:\nkernel:  gpiod_to_irq+0x53/0x70\nkernel:  acpi_dev_gpio_irq_get_by+0x113/0x1f0\nkernel:  i2c_acpi_get_irq+0xc0/0xd0\nkernel:  i2c_device_probe+0x28a/0x2a0\nkernel:  really_probe+0xf2/0x460\nkernel: RIP: 0010:gpiochip_to_irq+0x47/0xc0\n\nTo avoid such scenarios, restrict usage of GPIO chip irq members before\nthey are completely initialized."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:21:31.591Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7e88a50704b0c49ad3f2d11e8b963341cf68a89f"
        },
        {
          "url": "https://git.kernel.org/stable/c/0912cf021fb5749372b3782611d8b1de4986c13a"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c1fa3614795e2b24da1ba95de0b27b8f6ea4537"
        },
        {
          "url": "https://git.kernel.org/stable/c/f8dea54f74cae8c2e4d7b2952e8fed7743a85c87"
        },
        {
          "url": "https://git.kernel.org/stable/c/5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320"
        }
      ],
      "title": "gpio: Restrict usage of GPIO chip irq members before initialization",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49072",
    "datePublished": "2025-02-26T01:54:37.314Z",
    "dateReserved": "2025-02-26T01:49:39.245Z",
    "dateUpdated": "2026-05-23T15:21:31.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53421 (GCVE-0-2023-53421)

Vulnerability from cvelistv5 – Published: 2025-09-18 16:04 – Updated: 2026-05-11 19:44

Title

blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

Summary

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() When blkg_alloc() is called to allocate a blkcg_gq structure with the associated blkg_iostat_set's, there are 2 fields within blkg_iostat_set that requires proper initialization - blkg & sync. The former field was introduced by commit 3b8cc6298724 ("blk-cgroup: Optimize blkcg_rstat_flush()") while the later one was introduced by commit f73316482977 ("blk-cgroup: reimplement basic IO stats using cgroup rstat"). Unfortunately those fields in the blkg_iostat_set's are not properly re-initialized when they are cleared in v1's blkcg_reset_stats(). This can lead to a kernel panic due to NULL pointer access of the blkg pointer. The missing initialization of sync is less problematic and can be a problem in a debug kernel due to missing lockdep initialization. Fix these problems by re-initializing them after memory clearing.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476 - NULL Pointer Dereference

Assigner

Linux

References

5 references

URL	Tags
https://git.kernel.org/stable/c/0561aa6033dd18159…
https://git.kernel.org/stable/c/892faa76be894d324…
https://git.kernel.org/stable/c/b0d26283af612b9e0…
https://git.kernel.org/stable/c/abbce7f82613ea5ee…
https://git.kernel.org/stable/c/3d2af77e31ade05ff…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: f73316482977ac401ac37245c9df48079d4e11f3 , < 0561aa6033dd181594116d705c41fc16e97161a2 (git) Affected: f73316482977ac401ac37245c9df48079d4e11f3 , < 892faa76be894d324bf48b12a55c7af7be2bad83 (git) Affected: f73316482977ac401ac37245c9df48079d4e11f3 , < b0d26283af612b9e0cc3188b0b88ad7fdea447e8 (git) Affected: f73316482977ac401ac37245c9df48079d4e11f3 , < abbce7f82613ea5eeefd0fc3c1c8e449b9cef2a2 (git) Affected: f73316482977ac401ac37245c9df48079d4e11f3 , < 3d2af77e31ade05ff7ccc3658c3635ec1bea0979 (git)
Linux	Linux	Affected: 5.5 Unaffected: 0 , < 5.5 (semver) Unaffected: 5.15.199 , ≤ 5.15.* (semver) Unaffected: 6.1.162 , ≤ 6.1.* (semver) Unaffected: 6.3.13 , ≤ 6.3.* (semver) Unaffected: 6.4.4 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53421",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T19:12:11.098390Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:13:10.626Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "block/blk-cgroup.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "0561aa6033dd181594116d705c41fc16e97161a2",
              "status": "affected",
              "version": "f73316482977ac401ac37245c9df48079d4e11f3",
              "versionType": "git"
            },
            {
              "lessThan": "892faa76be894d324bf48b12a55c7af7be2bad83",
              "status": "affected",
              "version": "f73316482977ac401ac37245c9df48079d4e11f3",
              "versionType": "git"
            },
            {
              "lessThan": "b0d26283af612b9e0cc3188b0b88ad7fdea447e8",
              "status": "affected",
              "version": "f73316482977ac401ac37245c9df48079d4e11f3",
              "versionType": "git"
            },
            {
              "lessThan": "abbce7f82613ea5eeefd0fc3c1c8e449b9cef2a2",
              "status": "affected",
              "version": "f73316482977ac401ac37245c9df48079d4e11f3",
              "versionType": "git"
            },
            {
              "lessThan": "3d2af77e31ade05ff7ccc3658c3635ec1bea0979",
              "status": "affected",
              "version": "f73316482977ac401ac37245c9df48079d4e11f3",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "block/blk-cgroup.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.162",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.162",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.13",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.4",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()\n\nWhen blkg_alloc() is called to allocate a blkcg_gq structure\nwith the associated blkg_iostat_set\u0027s, there are 2 fields within\nblkg_iostat_set that requires proper initialization - blkg \u0026 sync.\nThe former field was introduced by commit 3b8cc6298724 (\"blk-cgroup:\nOptimize blkcg_rstat_flush()\") while the later one was introduced by\ncommit f73316482977 (\"blk-cgroup: reimplement basic IO stats using\ncgroup rstat\").\n\nUnfortunately those fields in the blkg_iostat_set\u0027s are not properly\nre-initialized when they are cleared in v1\u0027s blkcg_reset_stats(). This\ncan lead to a kernel panic due to NULL pointer access of the blkg\npointer. The missing initialization of sync is less problematic and\ncan be a problem in a debug kernel due to missing lockdep initialization.\n\nFix these problems by re-initializing them after memory clearing."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:44:39.128Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/0561aa6033dd181594116d705c41fc16e97161a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/892faa76be894d324bf48b12a55c7af7be2bad83"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0d26283af612b9e0cc3188b0b88ad7fdea447e8"
        },
        {
          "url": "https://git.kernel.org/stable/c/abbce7f82613ea5eeefd0fc3c1c8e449b9cef2a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/3d2af77e31ade05ff7ccc3658c3635ec1bea0979"
        }
      ],
      "title": "blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53421",
    "datePublished": "2025-09-18T16:04:04.526Z",
    "dateReserved": "2025-09-17T14:54:09.741Z",
    "dateUpdated": "2026-05-11T19:44:39.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53520 (GCVE-0-2023-53520)

Vulnerability from cvelistv5 – Published: 2025-10-01 11:46 – Updated: 2026-05-11 19:46

Title

Bluetooth: Fix hci_suspend_sync crash

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call trace: <4>[102152.653246] Call Trace: <4>[102152.653254] hci_suspend_sync+0x109/0x301 [bluetooth] <4>[102152.653259] hci_suspend_dev+0x78/0xcd [bluetooth] <4>[102152.653263] hci_suspend_notifier+0x42/0x7a [bluetooth] <4>[102152.653268] notifier_call_chain+0x43/0x6b <4>[102152.653271] __blocking_notifier_call_chain+0x48/0x69 <4>[102152.653273] __pm_notifier_call_chain+0x22/0x39 <4>[102152.653276] pm_suspend+0x287/0x57c <4>[102152.653278] state_store+0xae/0xe5 <4>[102152.653281] kernfs_fop_write+0x109/0x173 <4>[102152.653284] __vfs_write+0x16f/0x1a2 <4>[102152.653287] ? selinux_file_permission+0xca/0x16f <4>[102152.653289] ? security_file_permission+0x36/0x109 <4>[102152.653291] vfs_write+0x114/0x21d <4>[102152.653293] __x64_sys_write+0x7b/0xdb <4>[102152.653296] do_syscall_64+0x59/0x194 <4>[102152.653299] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 This patch holds the reference count of the hci_dev object while processing it in hci_suspend_notifier to avoid potential crash caused by the race condition.

Severity

No CVSS data available.

Assigner

Linux

References

4 references

URL	Tags
https://git.kernel.org/stable/c/e1fa25a91091bbed6…
https://git.kernel.org/stable/c/06e2b5ad72b60f90b…
https://git.kernel.org/stable/c/f9c8ce5d665653e3c…
https://git.kernel.org/stable/c/573ebae162111063e…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 9952d90ea2885d7cbf80cd233f694f09a9c0eaec , < e1fa25a91091bbed691ba2996a6cee809e3309a2 (git) Affected: 9952d90ea2885d7cbf80cd233f694f09a9c0eaec , < 06e2b5ad72b60f90bfe565c201346532e271f484 (git) Affected: 9952d90ea2885d7cbf80cd233f694f09a9c0eaec , < f9c8ce5d665653e3cf71a76349d41d7a7f7947e6 (git) Affected: 9952d90ea2885d7cbf80cd233f694f09a9c0eaec , < 573ebae162111063eedc6c838a659ba628f66a0f (git)
Linux	Linux	Affected: 5.7 Unaffected: 0 , < 5.7 (semver) Unaffected: 5.15.199 , ≤ 5.15.* (semver) Unaffected: 6.1.55 , ≤ 6.1.* (semver) Unaffected: 6.5.5 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e1fa25a91091bbed691ba2996a6cee809e3309a2",
              "status": "affected",
              "version": "9952d90ea2885d7cbf80cd233f694f09a9c0eaec",
              "versionType": "git"
            },
            {
              "lessThan": "06e2b5ad72b60f90bfe565c201346532e271f484",
              "status": "affected",
              "version": "9952d90ea2885d7cbf80cd233f694f09a9c0eaec",
              "versionType": "git"
            },
            {
              "lessThan": "f9c8ce5d665653e3cf71a76349d41d7a7f7947e6",
              "status": "affected",
              "version": "9952d90ea2885d7cbf80cd233f694f09a9c0eaec",
              "versionType": "git"
            },
            {
              "lessThan": "573ebae162111063eedc6c838a659ba628f66a0f",
              "status": "affected",
              "version": "9952d90ea2885d7cbf80cd233f694f09a9c0eaec",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.55",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.5",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix hci_suspend_sync crash\n\nIf hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier\nmay still be accessing it, it can cause the program to crash.\nHere\u0027s the call trace:\n  \u003c4\u003e[102152.653246] Call Trace:\n  \u003c4\u003e[102152.653254]  hci_suspend_sync+0x109/0x301 [bluetooth]\n  \u003c4\u003e[102152.653259]  hci_suspend_dev+0x78/0xcd [bluetooth]\n  \u003c4\u003e[102152.653263]  hci_suspend_notifier+0x42/0x7a [bluetooth]\n  \u003c4\u003e[102152.653268]  notifier_call_chain+0x43/0x6b\n  \u003c4\u003e[102152.653271]  __blocking_notifier_call_chain+0x48/0x69\n  \u003c4\u003e[102152.653273]  __pm_notifier_call_chain+0x22/0x39\n  \u003c4\u003e[102152.653276]  pm_suspend+0x287/0x57c\n  \u003c4\u003e[102152.653278]  state_store+0xae/0xe5\n  \u003c4\u003e[102152.653281]  kernfs_fop_write+0x109/0x173\n  \u003c4\u003e[102152.653284]  __vfs_write+0x16f/0x1a2\n  \u003c4\u003e[102152.653287]  ? selinux_file_permission+0xca/0x16f\n  \u003c4\u003e[102152.653289]  ? security_file_permission+0x36/0x109\n  \u003c4\u003e[102152.653291]  vfs_write+0x114/0x21d\n  \u003c4\u003e[102152.653293]  __x64_sys_write+0x7b/0xdb\n  \u003c4\u003e[102152.653296]  do_syscall_64+0x59/0x194\n  \u003c4\u003e[102152.653299]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1\n\nThis patch holds the reference count of the hci_dev object while\nprocessing it in hci_suspend_notifier to avoid potential crash\ncaused by the race condition."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:46:33.850Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e1fa25a91091bbed691ba2996a6cee809e3309a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/06e2b5ad72b60f90bfe565c201346532e271f484"
        },
        {
          "url": "https://git.kernel.org/stable/c/f9c8ce5d665653e3cf71a76349d41d7a7f7947e6"
        },
        {
          "url": "https://git.kernel.org/stable/c/573ebae162111063eedc6c838a659ba628f66a0f"
        }
      ],
      "title": "Bluetooth: Fix hci_suspend_sync crash",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53520",
    "datePublished": "2025-10-01T11:46:07.355Z",
    "dateReserved": "2025-10-01T11:39:39.407Z",
    "dateUpdated": "2026-05-11T19:46:33.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53662 (GCVE-0-2023-53662)

Vulnerability from cvelistv5 – Published: 2025-10-07 15:21 – Updated: 2026-05-11 19:49

Title

ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}

Summary

In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} If the filename casefolding fails, we'll be leaking memory from the fscrypt_name struct, namely from the 'crypto_buf.name' member. Make sure we free it in the error path on both ext4_fname_setup_filename() and ext4_fname_prepare_lookup() functions.

Severity

No CVSS data available.

Assigner

Linux

References

4 references

URL	Tags
https://git.kernel.org/stable/c/98fc9c2cc45cfcb56…
https://git.kernel.org/stable/c/1fb3f1bbfdb511034…
https://git.kernel.org/stable/c/36daf050be3f6f067…
https://git.kernel.org/stable/c/7ca4b085f430f3774…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1ae98e295fa2577fb5e492200c58d10230e00e99 , < 98fc9c2cc45cfcb56961a73de3ec69b474063fc0 (git) Affected: 1ae98e295fa2577fb5e492200c58d10230e00e99 , < 1fb3f1bbfdb511034b0360dbeb0f6a8424ed2a5c (git) Affected: 1ae98e295fa2577fb5e492200c58d10230e00e99 , < 36daf050be3f6f067631dc52054de2d3b7cc849f (git) Affected: 1ae98e295fa2577fb5e492200c58d10230e00e99 , < 7ca4b085f430f3774c3838b3da569ceccd6a0177 (git)
Linux	Linux	Affected: 5.13 Unaffected: 0 , < 5.13 (semver) Unaffected: 5.15.199 , ≤ 5.15.* (semver) Unaffected: 6.1.54 , ≤ 6.1.* (semver) Unaffected: 6.5.4 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/crypto.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "98fc9c2cc45cfcb56961a73de3ec69b474063fc0",
              "status": "affected",
              "version": "1ae98e295fa2577fb5e492200c58d10230e00e99",
              "versionType": "git"
            },
            {
              "lessThan": "1fb3f1bbfdb511034b0360dbeb0f6a8424ed2a5c",
              "status": "affected",
              "version": "1ae98e295fa2577fb5e492200c58d10230e00e99",
              "versionType": "git"
            },
            {
              "lessThan": "36daf050be3f6f067631dc52054de2d3b7cc849f",
              "status": "affected",
              "version": "1ae98e295fa2577fb5e492200c58d10230e00e99",
              "versionType": "git"
            },
            {
              "lessThan": "7ca4b085f430f3774c3838b3da569ceccd6a0177",
              "status": "affected",
              "version": "1ae98e295fa2577fb5e492200c58d10230e00e99",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/crypto.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.54",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.4",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}\n\nIf the filename casefolding fails, we\u0027ll be leaking memory from the\nfscrypt_name struct, namely from the \u0027crypto_buf.name\u0027 member.\n\nMake sure we free it in the error path on both ext4_fname_setup_filename()\nand ext4_fname_prepare_lookup() functions."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:49:29.602Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/98fc9c2cc45cfcb56961a73de3ec69b474063fc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/1fb3f1bbfdb511034b0360dbeb0f6a8424ed2a5c"
        },
        {
          "url": "https://git.kernel.org/stable/c/36daf050be3f6f067631dc52054de2d3b7cc849f"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ca4b085f430f3774c3838b3da569ceccd6a0177"
        }
      ],
      "title": "ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53662",
    "datePublished": "2025-10-07T15:21:21.703Z",
    "dateReserved": "2025-10-07T15:16:59.662Z",
    "dateUpdated": "2026-05-11T19:49:29.602Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-54207 (GCVE-0-2023-54207)

Vulnerability from cvelistv5 – Published: 2025-12-30 12:11 – Updated: 2026-05-11 19:57

Title

HID: uclogic: Correct devm device reference for hidinput input_dev name

Summary

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput input_dev name Reference the HID device rather than the input device for the devm allocation of the input_dev name. Referencing the input_dev would lead to a use-after-free when the input_dev was unregistered and subsequently fires a uevent that depends on the name. At the point of firing the uevent, the name would be freed by devres management. Use devm_kasprintf to simplify the logic for allocating memory and formatting the input_dev name string.

Severity

No CVSS data available.

Assigner

Linux

References

6 references

URL	Tags
https://git.kernel.org/stable/c/f78bb490b16ecb506…
https://git.kernel.org/stable/c/51f49e3927ad545ce…
https://git.kernel.org/stable/c/f283805d984343b2f…
https://git.kernel.org/stable/c/4c2707dfee5847dc0…
https://git.kernel.org/stable/c/58f0d1c0e494a88f3…
https://git.kernel.org/stable/c/dd613a4e45f8d35f4…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < f78bb490b16ecb506d4904be4b00bf9aad6588f9 (git) Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < 51f49e3927ad545cec0c0afb86856ccacd9f085d (git) Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < f283805d984343b2f216e2f4c6c7af265b9542ae (git) Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < 4c2707dfee5847dc0b5ecfbe512c29c93832fdc4 (git) Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < 58f0d1c0e494a88f301bf455da7df4366f179bbb (git) Affected: cce2dbdf258e6b27b2b100f511531edabb77f427 , < dd613a4e45f8d35f49a63a2064e5308fa5619e29 (git)
Linux	Linux	Affected: 4.1 Unaffected: 0 , < 4.1 (semver) Unaffected: 5.10.249 , ≤ 5.10.* (semver) Unaffected: 5.15.199 , ≤ 5.15.* (semver) Unaffected: 6.1.53 , ≤ 6.1.* (semver) Unaffected: 6.4.16 , ≤ 6.4.* (semver) Unaffected: 6.5.3 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-uclogic-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f78bb490b16ecb506d4904be4b00bf9aad6588f9",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            },
            {
              "lessThan": "51f49e3927ad545cec0c0afb86856ccacd9f085d",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            },
            {
              "lessThan": "f283805d984343b2f216e2f4c6c7af265b9542ae",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            },
            {
              "lessThan": "4c2707dfee5847dc0b5ecfbe512c29c93832fdc4",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            },
            {
              "lessThan": "58f0d1c0e494a88f301bf455da7df4366f179bbb",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            },
            {
              "lessThan": "dd613a4e45f8d35f49a63a2064e5308fa5619e29",
              "status": "affected",
              "version": "cce2dbdf258e6b27b2b100f511531edabb77f427",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/hid/hid-uclogic-core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "lessThan": "4.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.249",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: uclogic: Correct devm device reference for hidinput input_dev name\n\nReference the HID device rather than the input device for the devm\nallocation of the input_dev name. Referencing the input_dev would lead to a\nuse-after-free when the input_dev was unregistered and subsequently fires a\nuevent that depends on the name. At the point of firing the uevent, the\nname would be freed by devres management.\n\nUse devm_kasprintf to simplify the logic for allocating memory and\nformatting the input_dev name string."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:57:32.385Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f78bb490b16ecb506d4904be4b00bf9aad6588f9"
        },
        {
          "url": "https://git.kernel.org/stable/c/51f49e3927ad545cec0c0afb86856ccacd9f085d"
        },
        {
          "url": "https://git.kernel.org/stable/c/f283805d984343b2f216e2f4c6c7af265b9542ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/4c2707dfee5847dc0b5ecfbe512c29c93832fdc4"
        },
        {
          "url": "https://git.kernel.org/stable/c/58f0d1c0e494a88f301bf455da7df4366f179bbb"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd613a4e45f8d35f49a63a2064e5308fa5619e29"
        }
      ],
      "title": "HID: uclogic: Correct devm device reference for hidinput input_dev name",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54207",
    "datePublished": "2025-12-30T12:11:06.643Z",
    "dateReserved": "2025-12-30T12:06:44.500Z",
    "dateUpdated": "2026-05-11T19:57:32.385Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-36347 (GCVE-0-2024-36347)

Vulnerability from cvelistv5 – Published: 2025-06-27 22:14 – Updated: 2026-02-26 17:50

Summary

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

Severity

6.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

46 products

Vendor	Product	Version
AMD	AMD EPYC™ 7001 Series	Unaffected: NaplesPI 1.0.0.P
AMD	AMD EPYC™ 7002 Series	Unaffected: RomePI 1.0.0.L
AMD	AMD EPYC™ 7003 Series	Unaffected: MilanPI 1.0.0.F
AMD	AMD EPYC™ 9004 Series	Unaffected: Genoa 1.0.0.E
AMD	AMD EPYC™ 4004 Series	Unaffected: ComboAM5PI1.0.0.a Unaffected: ComboAM5PI1.1.0.3c Unaffected: ComboAM5PI1.2.0.3
AMD	AMD EPYC™ 9005 Series	Unaffected: TurinPI 1.0.0.4
AMD	AMD Instinct™ MI300A	Unaffected: MI300PI_SR5 1.0.0.8
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.E
AMD	AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.E
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.D Unaffected: ComboAM4v2PI 1.2.0.E
AMD	AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4PI 1.0.0.D Unaffected: ComboAM4v2PI 1.2.0.E
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.0.0.a Unaffected: ComboAM5PI 1.1.0.3c Unaffected: ComboAM5PI 1.2.0.3
AMD	AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.E
AMD	AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics	Unaffected: ComboAM5PI 1.1.0.3c Unaffected: ComboAM5PI 1.2.0.3
AMD	AMD Ryzen™ 9000 Series Desktop Processors	Unaffected: ComboAM5PI 1.2.0.3c
AMD	AMD Ryzen™ Threadripper™ 3000 Series Processors	Unaffected: CastlePeakPI-SP3r3 1.0.0.E
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Unaffected: StormPeakPI-SP6 1.0.0.1k Unaffected: StormPeakPI-SP6 1.1.0.0i
AMD	AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.B Unaffected: CastlePeakWSPI-sWRX8 1.0.0.g
AMD	AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.B
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.1.2b
AMD	AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics	Unaffected: PicassoPI-FP5 1.0.1.2b
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.Eb
AMD	AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.1.1b
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Unaffected: MendocinoPI-FT6 1.0.0.7b
AMD	AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics	Unaffected: RembrandtPI-FP7 1.0.0.Bb
AMD	AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics	Unaffected: RembrandtPI-FP7 1.0.0.Bb
AMD	AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6 1.0.1.1b
AMD	AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7 1.2.0.0
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7 1.2.0.0
AMD	AMD Ryzen™ 7045 Series Mobile Processors	Unaffected: DragonRangeFL1 1.0.0.3g
AMD	AMD Ryzen™ AI 300 Series	Unaffected: StrixKrakenPI-FP8_1.1.0.0b
AMD	AMD Ryzen™ AI Max +	Unaffected: StrixHaloPI-FP11_1.0.0.1
AMD	AMD Ryzen™ 9000HX Series Mobile Processors	Unaffected: FireRangeFL1PI 1.0.0.0a
AMD	AMD EPYC™ Embedded 3000	Unaffected: SnowyOwl PI 1.1.0.E
AMD	AMD EPYC™ Embedded 7002	Unaffected: EmbRomePI-SP3 1.0.0.D
AMD	AMD EPYC™ Embedded 7003	Unaffected: EmbMilan PI-SP3 1.0.0.A
AMD	AMD EPYC™ Embedded 8004	Unaffected: EmbGenoaPI-SP5 1.0.0.9
AMD	AMD EPYC™ Embedded 9004	Unaffected: EmbGenoaPI-SP5 1.0.0.9
AMD	AMD EPYC™ Embedded 97X4	Unaffected: EmbGenoaPI-SP5 1.0.0.9
AMD	AMD Ryzen™ Embedded R1000	Unaffected: EmbeddedPI-FP5 1.2.0.F
AMD	AMD Ryzen™ Embedded R2000	Unaffected: EmbeddedR2KPI 1.0.0.5
AMD	AMD Ryzen™ Embedded 5000	Unaffected: EmbAM4PI 1.0.0.7
AMD	AMD Ryzen™ Embedded 7000	Unaffected: EmbeddedAM5PI 1.0.0.3
AMD	AMD Ryzen™ Embedded V1000	Unaffected: EmbeddedPI-FP5 1.2.0.F
AMD	AMD Ryzen™Embedded V2000	Unaffected: EmbeddedPI-FP6 1.0.0.B
AMD	AMD Ryzen™Embedded V3000	Unaffected: EmbeddedPI-FP7R2 1.0.0.C

Date Public

2025-06-27 16:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-36347",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-01T03:55:55.838463Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:50:21.428Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7001 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "NaplesPI 1.0.0.P"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7002 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RomePI 1.0.0.L"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7003 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MilanPI 1.0.0.F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9004 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Genoa 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 4004 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI1.0.0.a"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI1.1.0.3c"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI1.2.0.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9005 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "TurinPI 1.0.0.4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI300A",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MI300PI_SR5 1.0.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.D"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.D"
            },
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.a"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3c"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3c"
            },
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakPI-SP3r3 1.0.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.0.0.1k"
            },
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.1.0.0i"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.B"
            },
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.g"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000WX- Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile  Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.1.2b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5 1.0.1.2b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.Eb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.1.1b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MendocinoPI-FT6 1.0.0.7b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7 1.0.0.Bb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7035 Series Processor with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7 1.0.0.Bb"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6 1.0.1.1b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7 1.2.0.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7 1.2.0.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7045 Series Mobile Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1 1.0.0.3g"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI 300 Series",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrakenPI-FP8_1.1.0.0b"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI Max +",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixHaloPI-FP11_1.0.0.1"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000HX Series Mobile Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "FireRangeFL1PI 1.0.0.0a"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 3000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "SnowyOwl PI 1.1.0.E"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7002",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbRomePI-SP3 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7003",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbMilan PI-SP3 1.0.0.A"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 8004",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5  1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9004",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 97X4",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5  1.2.0.F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI  1.0.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI  1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 7000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI  1.0.0.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1.2.0.F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122Embedded V2000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6 1.0.0.B"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122Embedded V3000",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP7R2 1.0.0.C"
            }
          ]
        }
      ],
      "datePublic": "2025-06-27T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.\u003cbr\u003e"
            }
          ],
          "value": "Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347 Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-27T22:14:01.944Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-36347",
    "datePublished": "2025-06-27T22:14:01.944Z",
    "dateReserved": "2024-05-23T19:44:47.201Z",
    "dateUpdated": "2026-02-26T17:50:21.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-46816 (GCVE-0-2024-46816)

Vulnerability from cvelistv5 – Published: 2024-09-27 12:35 – Updated: 2026-05-11 20:37

Title

drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links [Why] Coverity report OVERRUN warning. There are only max_links elements within dc->links. link count could up to AMDGPU_DM_MAX_DISPLAY_INDEX 31. [How] Make sure link count less than max_links.

Severity

No CVSS data available.

Assigner

Linux

References

6 references

URL	Tags
https://git.kernel.org/stable/c/e2411b6abf6e5d6c3…
https://git.kernel.org/stable/c/e3cd0d8362de47f61…
https://git.kernel.org/stable/c/13080d052c995aee1…
https://git.kernel.org/stable/c/c84632096722fd312…
https://git.kernel.org/stable/c/36c39a8dcce210649…
https://git.kernel.org/stable/c/cf8b16857db702ceb…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < e2411b6abf6e5d6c33d0450846673cdf536f0ba4 (git) Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < e3cd0d8362de47f613bfdf315b3f3a9ab71e66bf (git) Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < 13080d052c995aee14695a5b740c245121eb2bcc (git) Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < c84632096722fd31251f0957fafc9e90d9a247fd (git) Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < 36c39a8dcce210649f2f45f252abaa09fcc1ae87 (git) Affected: 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c , < cf8b16857db702ceb8d52f9219a4613363e2b1cf (git)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 5.10.237 , ≤ 5.10.* (semver) Unaffected: 5.15.181 , ≤ 5.15.* (semver) Unaffected: 6.1.135 , ≤ 6.1.* (semver) Unaffected: 6.6.88 , ≤ 6.6.* (semver) Unaffected: 6.10.9 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46816",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T14:17:56.570304Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T14:18:08.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:31:12.490Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e2411b6abf6e5d6c33d0450846673cdf536f0ba4",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            },
            {
              "lessThan": "e3cd0d8362de47f613bfdf315b3f3a9ab71e66bf",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            },
            {
              "lessThan": "13080d052c995aee14695a5b740c245121eb2bcc",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            },
            {
              "lessThan": "c84632096722fd31251f0957fafc9e90d9a247fd",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            },
            {
              "lessThan": "36c39a8dcce210649f2f45f252abaa09fcc1ae87",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            },
            {
              "lessThan": "cf8b16857db702ceb8d52f9219a4613363e2b1cf",
              "status": "affected",
              "version": "4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.237",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.135",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.88",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.237",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.181",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.135",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.88",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.9",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links\n\n[Why]\nCoverity report OVERRUN warning. There are\nonly max_links elements within dc-\u003elinks. link\ncount could up to AMDGPU_DM_MAX_DISPLAY_INDEX 31.\n\n[How]\nMake sure link count less than max_links."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:37:06.591Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e2411b6abf6e5d6c33d0450846673cdf536f0ba4"
        },
        {
          "url": "https://git.kernel.org/stable/c/e3cd0d8362de47f613bfdf315b3f3a9ab71e66bf"
        },
        {
          "url": "https://git.kernel.org/stable/c/13080d052c995aee14695a5b740c245121eb2bcc"
        },
        {
          "url": "https://git.kernel.org/stable/c/c84632096722fd31251f0957fafc9e90d9a247fd"
        },
        {
          "url": "https://git.kernel.org/stable/c/36c39a8dcce210649f2f45f252abaa09fcc1ae87"
        },
        {
          "url": "https://git.kernel.org/stable/c/cf8b16857db702ceb8d52f9219a4613363e2b1cf"
        }
      ],
      "title": "drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46816",
    "datePublished": "2024-09-27T12:35:57.742Z",
    "dateReserved": "2024-09-11T15:12:18.283Z",
    "dateUpdated": "2026-05-11T20:37:06.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2026-AVI-0495

Solutions

CVE-2021-47599 (GCVE-0-2021-47599)

CVE-2022-48875 (GCVE-0-2022-48875)

CVE-2022-49046 (GCVE-0-2022-49046)

CVE-2022-49072 (GCVE-0-2022-49072)

CVE-2023-53421 (GCVE-0-2023-53421)

CVE-2023-53520 (GCVE-0-2023-53520)

CVE-2023-53662 (GCVE-0-2023-53662)

CVE-2023-54207 (GCVE-0-2023-54207)

CVE-2024-36347 (GCVE-0-2024-36347)

CVE-2024-46816 (GCVE-0-2024-46816)

Tags

Sightings

Nomenclature