Saurabh Sengar

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A NULL pointer dereference issue has been resolved in the Linux kernel, specifically in the uio hv generic module. The issue occurs when the primary channel pointer is NULL for primary VM Bus channels, as this pointer is only valid for secondary channels. The rescind callback is meant for primary channels only. The fix involves retrieving the device obj from the parent for the primary channel to prevent the NULL pointer dereference. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A vulnerability in the Linux kernel has been resolved, related to the `gup pud range()` function for dax. The issue occurs when `pud huge()` returns true on x86, but dax does not depend on hugetlb. This fix addresses a kernel panic caused by a general protection fault, probably for a non-canonical address. The call trace includes functions such as `get user pages fast()`, `iov iter get pages()`, and `bio iov iter get pages()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.