Manivannan Sadhasivam

A vulnerability has been resolved in the Linux kernel. The issue is related to the scsi: ufs: core, where the RTC work is not cancelled during ufshcd remove(), leading to a NULL pointer dereference. This occurs because the RTC work accesses the ufshcd internal structures and should be cancelled when ufshcd is removed. The vulnerability can result in a kernel NULL pointer dereference at a virtual address.

A vulnerability in the Linux kernel has been resolved, specifically in the scsi: ufs: qcom module. The issue occurs when platform MSIs are not freed when ESI is enabled, resulting in a NULL pointer dereference. This can lead to a kernel crash, as shown in the call trace. The vulnerability affects the `mutex lock`, `platform device msi free irqs all`, `ufs qcom remove`, and other functions.

A critical vulnerability in the Linux kernel's PCI keystone component has been fixed. The issue involved the `ks pcie quirk()` function, where an if-statement expression accidentally used `&&` instead of `||`, potentially resulting in a NULL dereference. This fix corrects the if-statement expression to use the correct condition.