CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel that may lead to deadlock during sigreturn operations in the context of the shadow stack. The issue arises when the kernel attempts to access shadow stack memory, potentially leading to a situation where two processors try to acquire locks, resulting in a deadlock.

A vulnerability has been identified in the Linux kernel that leads to deadlock in the jbd2_journal_cancel_revoke() function. A change introduced in commit f76d4c28a46a breaks lock ordering, which can lead to an ABBA situation when the filesystem blocksize is smaller than the pagesize.

A vulnerability has been identified in the Linux kernel related to improper IRQ cleanup during device initialization failure. When adf_dev_up() partially completes and fails, IRQ handlers are not detached before MSI-X vectors are released.

A vulnerability in the Linux kernel has been resolved in KVM regarding the use of NextRIP in vmcb02 after the first L2 VMRUN. The issue occurs when NRIPS is disabled, leading to incorrect NextRIP settings.

A vulnerability in the Linux kernel has been fixed in the retry_aligned_read() function, which could lead to an infinite loop and soft lockup when encountering an overlapped stripe.

A vulnerability has been identified in the Linux kernel that leads to deadlock during RAID10 array check operations when NOWAIT requests are simultaneously executed. The issue arises from improper management of the nr_pending value, resulting in underflow and blocking of the sync thread.

A vulnerability has been identified in the Linux kernel within the ALSA module that may lead to an infinite loop due to the lack of pll_rate updates. The issue occurs when spdif_passthru_playback_setup() skips atc_pll_init() for a frequency of 32000 Hz.

A vulnerability has been identified in the Linux kernel related to a usb_dev reference leak during ALSA: caiaq device initialization failure. The issue is that the create_card() function does not release the reference, leading to a leak of the usb_device structure and its allocations.

A vulnerability has been identified in the Linux kernel related to the missing brelse() call in the ext4_xattr_inode_dec_ref_all() function. The commit c8e008b60492 introduced a refcount leak when block_csum is false.

A vulnerability has been identified in the Linux kernel regarding improper management of kthread threads in the event of an error occurring after their creation. The ssif thread will not be stopped, potentially leading to undesirable effects.

A vulnerability has been identified in the Linux kernel related to memory leaks in the weighted_interleave_auto_store() function. These issues occur when a user inputs 'true' or 'false', leading to memory not being freed.

A vulnerability has been identified in the Linux kernel related to the hdlc_tx_frames() function, which calls usleep_range() in an atomic context, which is illegal. The issue has been resolved by moving the buffer-space wait outside the spinlock context.

A vulnerability has been identified in the Linux kernel related to a watch count leak in inotify when the fsnotify_add_inode_mark_locked() function fails. In this case, the dec_inotify_watches() function is not called, leading to a watch count leak and potentially reaching the max_user_watches limit.

A vulnerability has been identified in the Linux kernel related to memory management concerning the BYE packet sent by a node. The nameserver does not free the node memory after processing the packet, leading to a memory leak.

A vulnerability has been identified in the Linux kernel that allows re-entry into the rmqueue() function from NMI context in UP systems, leading to corruption of the free page lists. This issue occurs when spin_trylock() always returns success, even when the lock is already held.

A vulnerability has been identified in the Linux kernel that allows for a NULL pointer dereference in the interrupt trigger path. This issue has been resolved by adding validation to ensure that MSI is configured before accessing the cdx_irqs array.

A vulnerability has been identified in the Linux kernel within KVM that occurs during nested #VMEXIT when loading L1's CR3 fails. In this case, the nested_svm_vmexit() function returns an error code that is ignored by most callers, leading to L1 continuing to run in a corrupted state.

A vulnerability has been identified in the Linux kernel related to a device_node leak in the mc_probe() function. The original code did not free the r5_core_node reference, leading to a memory leak.

A vulnerability has been identified in the Linux kernel related to the algif_aead algorithm, affecting asynchronous AEAD requests. The issue arises from the use of a socket-wide IV buffer, which can lead to inconsistent IV handling due to later socket activity.

A vulnerability in the Linux kernel was identified that allowed unlimited queries by local clients. A limit of 64 queries has been introduced to prevent potential flood attacks.