CVE-2023-53440

In CVE-2023-53440, the Linux kernel nilfs2 sysfs interface had lifetime timing issues that could lead to inode NULL pointer dereferences or use-after-free, and lockdep warnings. Specifically, nilfs_sysfs_create_device_group creates sysfs attributes for per-filesystem metadata (cpfile, sufile, dat...

CVE-2024-53223 clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs

In the Linux kernel, the following vulnerability has been resolved: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs Base clocks are the first in being probed and are real dependencies of the rest of fixed, factor and peripheral clocks. For old ralink SoCs RT2880, RT305x and RT38...

kernel: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()

A locking violation was found in the Linux kernel RCU-tasks subsystem's callback list initialization. During system boot, the initialization code calls prinfo while holding the rtp-cbsgbllock spinlock, causing a potentially sleeping function to be called in atomic context, which results in kernel...