https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:32:40 +0000 https://cve.radiocsirt.org/vuln/cve-2021-47169 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>serial: rp2: use &#39;request_firmware&#39; instead of &#39;request_firmware_nowait&#39;</p> <p>In &#39;rp2_probe&#39;, the driver registers &#39;rp2_uart_interrupt&#39; then calls &#39;rp2_fw_cb&#39; through &#39;request_firmware_nowait&#39;. In &#39;rp2_fw_cb&#39;, if the firmware don&#39;t exists, function just return without initializing ports of &#39;rp2_card&#39;. But now the interrupt handler function has been registered, and when an interrupt comes, &#39;rp2_uart_interrupt&#39; may access those ports then causing NULL pointer dereference or other bugs.</p> <p>Because the driver does some initialization work in &#39;rp2_fw_cb&#39;, in order to make the driver ready to handle interrupts, &#39;request_firmware&#39; should be used instead of asynchronous &#39;request_firmware_nowait&#39;.</p> <p>This report reveals it:</p> <p>INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59- gc9ba5276e321-prebuilt.qemu.org 04/01/2014 Call Trace: &lt;IRQ&gt; __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xec/0x156 lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:727 [inline] register_lock_class+0x14e5/0x1ba0 kernel/locking/lockdep.c:753 __lock_acquire+0x187/0x3750 kernel/locking/lockdep.c:3303 lock_acquire+0x124/0x340 kernel/locking/lockdep.c:3907 __raw_spin_lock include/linux/spinlock_api_smp…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>serial: rp2: use &#39;request_firmware&#39; instead of &#39;request_firmware_nowait&#39;</p> <p>In &#39;rp2_probe&#39;, the driver registers &#39;rp2_uart_interrupt&#39; then calls &#39;rp2_fw_cb&#39; through &#39;request_firmware_nowait&#39;. In &#39;rp2_fw_cb&#39;, if the firmware don&#39;t exists, function just return without initializing ports of &#39;rp2_card&#39;. But now the interrupt handler function has been registered, and when an interrupt comes, &#39;rp2_uart_interrupt&#39; may access those ports then causing NULL pointer dereference or other bugs.</p> <p>Because the driver does some initialization work in &#39;rp2_fw_cb&#39;, in order to make the driver ready to handle interrupts, &#39;request_firmware&#39; should be used instead of asynchronous &#39;request_firmware_nowait&#39;.</p> <p>This report reveals it:</p> <p>INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59- gc9ba5276e321-prebuilt.qemu.org 04/01/2014 Call Trace: &lt;IRQ&gt; __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xec/0x156 lib/dump_stack.c:118 assign_lock_key kernel/locking/lockdep.c:727 [inline] register_lock_class+0x14e5/0x1ba0 kernel/locking/lockdep.c:753 __lock_acquire+0x187/0x3750 kernel/locking/lockdep.c:3303 lock_acquire+0x124/0x340 kernel/locking/lockdep.c:3907 __raw_spin_lock include/linux/spinlock_api_smp…</p> https://cve.radiocsirt.org/vuln/cve-2021-47169