Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mel Gorman

#25091of 60,570
11Total CVSS
Vulnerabilities · 2
Medium
2
PT-2024-11823
2022-10-13
5.5
CVE-2022-48953
Linux
Linux Kernel
The issue is related to the Linux kernel's rtc-cmos driver, where the event handler registration ordering is incorrect. This leads to a NULL pointer dereference in `rtc handler()` on boot if the RTC fixed event happens to be active at the init time. The problem arises because `acpi install fixed event handler()` enables the event automatically on success, but it is called before the handler routine is ready to handle events. The `rtc handler()` function uses `dev get drvdata()` to get to the cmos object pointer, but the driver data pointer is only populated in `cmos do probe()`. To address this issue, the initialization ordering of the driver needs to be changed so that `cmos wake setup()` is always called after a successful `cmos do probe()` call.
PT-2022-7506
2022-02-11
5.5
CVE-2022-48800
Linux
Linux Kernel
The issue is related to a deadlock in the Linux kernel's vmscan component, which can cause a soft lockup. This occurs when kcompactd is not rescheduling on a CPU while a task is waiting for it to reschedule, allowing pages to be released. The problem is specific to CONFIG PREEMPT=n builds and can happen when there is no file LRU and the inactive anon list is not low. A task migrating pages was found to be trying to drain PCP lists, leading to the deadlock.