目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2023-52884— Linux kernel 安全漏洞

EPSS 0.01% · P0
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2023-52884の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Input: cyapa - add missing input core locking to suspend/resume functions
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: Input: cyapa - add missing input core locking to suspend/resume functions Grab input->mutex during suspend/resume functions like it is done in other input drivers. This fixes the following warning during system suspend/resume cycle on Samsung Exynos5250-based Snow Chromebook: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 1680 at drivers/input/input.c:2291 input_device_enabled+0x68/0x6c Modules linked in: ... CPU: 1 PID: 1680 Comm: kworker/u4:12 Tainted: G W 6.6.0-rc5-next-20231009 #14109 Hardware name: Samsung Exynos (Flattened Device Tree) Workqueue: events_unbound async_run_entry_fn unwind_backtrace from show_stack+0x10/0x14 show_stack from dump_stack_lvl+0x58/0x70 dump_stack_lvl from __warn+0x1a8/0x1cc __warn from warn_slowpath_fmt+0x18c/0x1b4 warn_slowpath_fmt from input_device_enabled+0x68/0x6c input_device_enabled from cyapa_gen3_set_power_mode+0x13c/0x1dc cyapa_gen3_set_power_mode from cyapa_reinitialize+0x10c/0x15c cyapa_reinitialize from cyapa_resume+0x48/0x98 cyapa_resume from dpm_run_callback+0x90/0x298 dpm_run_callback from device_resume+0xb4/0x258 device_resume from async_resume+0x20/0x64 async_resume from async_run_entry_fn+0x40/0x15c async_run_entry_fn from process_scheduled_works+0xbc/0x6a8 process_scheduled_works from worker_thread+0x188/0x454 worker_thread from kthread+0x108/0x140 kthread from ret_from_fork+0x14/0x28 Exception stack(0xf1625fb0 to 0xf1625ff8) ... ---[ end trace 0000000000000000 ]--- ... ------------[ cut here ]------------ WARNING: CPU: 1 PID: 1680 at drivers/input/input.c:2291 input_device_enabled+0x68/0x6c Modules linked in: ... CPU: 1 PID: 1680 Comm: kworker/u4:12 Tainted: G W 6.6.0-rc5-next-20231009 #14109 Hardware name: Samsung Exynos (Flattened Device Tree) Workqueue: events_unbound async_run_entry_fn unwind_backtrace from show_stack+0x10/0x14 show_stack from dump_stack_lvl+0x58/0x70 dump_stack_lvl from __warn+0x1a8/0x1cc __warn from warn_slowpath_fmt+0x18c/0x1b4 warn_slowpath_fmt from input_device_enabled+0x68/0x6c input_device_enabled from cyapa_gen3_set_power_mode+0x13c/0x1dc cyapa_gen3_set_power_mode from cyapa_reinitialize+0x10c/0x15c cyapa_reinitialize from cyapa_resume+0x48/0x98 cyapa_resume from dpm_run_callback+0x90/0x298 dpm_run_callback from device_resume+0xb4/0x258 device_resume from async_resume+0x20/0x64 async_resume from async_run_entry_fn+0x40/0x15c async_run_entry_fn from process_scheduled_works+0xbc/0x6a8 process_scheduled_works from worker_thread+0x188/0x454 worker_thread from kthread+0x108/0x140 kthread from ret_from_fork+0x14/0x28 Exception stack(0xf1625fb0 to 0xf1625ff8) ... ---[ end trace 0000000000000000 ]---
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于Input模块存在问题。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux d69f0a43c677e8afc67a222e1e7b51b9acc69cd3 ~ f99809fdeb50d65bcbc1661ef391af94eebb8a75 -
LinuxLinux 5.11 -

II. CVE-2023-52884の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2023-52884のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Linux · 2024-06-21 · 40 CVEs total

CVE-2024-38636f2fs: multidev: fix to recognize valid zero block address
CVE-2024-38627stm class: Fix a double free in stm_register_device()
CVE-2024-38628usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.
CVE-2024-38629dmaengine: idxd: Avoid unnecessary destruction of file_ida
CVE-2024-38630watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
CVE-2024-38631iio: adc: PAC1934: fix accessing out of bounds array index
CVE-2024-38632vfio/pci: fix potential memory leak in vfio_intx_enable()
CVE-2024-38633serial: max3100: Update uart_driver_registered on driver removal
CVE-2024-38634serial: max3100: Lock port->lock when calling uart_handle_cts_change()
CVE-2024-38635soundwire: cadence: fix invalid PDI offset
CVE-2024-38625fs/ntfs3: Check 'folio' pointer for NULL
CVE-2024-38637greybus: lights: check return of get_channel_from_mode
CVE-2024-38659enic: Validate length of nl attributes in enic_set_vf_port
CVE-2024-38662bpf: Allow delete from sockmap/sockhash only if update is allowed
CVE-2024-38780dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
CVE-2024-39277dma-mapping: benchmark: handle NUMA_NO_NODE correctly
CVE-2024-34777dma-mapping: benchmark: fix node id validation
CVE-2024-36288SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
CVE-2024-36477tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
CVE-2024-36481tracing/probes: fix error check in parse_btf_field()

Showing 20 of 40 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2023-52884へのコメント

まだコメントはありません

コメントを残す