CVE-2023-53440

CVE-2023-53440 concerns the nilfs2 sysfs interface lifetime in the Linux kernel. Multiple connected advisories confirm a race in sysfs entry creation/deletion for per-filesystem metadata files (cpfile, sufile, dat), where attributes may be accessed outside the intended lifetime, risking inode NUL...

CVE-2024-53223 clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs

In the Linux kernel, the following vulnerability has been resolved: clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs Base clocks are the first in being probed and are real dependencies of the rest of fixed, factor and peripheral clocks. For old ralink SoCs RT2880, RT305x and RT38...

kernel: rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic()

A locking violation was found in the Linux kernel RCU-tasks subsystem's callback list initialization. During system boot, the initialization code calls prinfo while holding the rtp-cbsgbllock spinlock, causing a potentially sleeping function to be called in atomic context, which results in kernel...