<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-11T06:56:43.310049+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb5f7bb7-c2cc-4a0c-a64a-19b361a3d8f4/export</id>
    <title>fb5f7bb7-c2cc-4a0c-a64a-19b361a3d8f4</title>
    <updated>2026-05-11T06:56:43.679905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb5f7bb7-c2cc-4a0c-a64a-19b361a3d8f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-53068", "type": "seen", "source": "https://t.me/cvedetector/11496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-53068 - Qualcomm Arm SCMI Firmware Bugybility: Slab-Use-After-Free\", \n  \"Content\": \"CVE ID : CVE-2024-53068 \nPublished : Nov. 19, 2024, 6:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfirmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()  \n  \nThe scmi_dev-&amp;gt;name is released prematurely in __scmi_device_destroy(),  \nwhich causes slab-use-after-free when accessing scmi_dev-&amp;gt;name in  \nscmi_bus_notifier(). So move the release of scmi_dev-&amp;gt;name to  \nscmi_device_release() to avoid slab-use-after-free.  \n  \n  |  BUG: KASAN: slab-use-after-free in strncmp+0xe4/0xec  \n  |  Read of size 1 at addr ffffff80a482bcc0 by task swapper/0/1  \n  |  \n  |  CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.6.38-debug #1  \n  |  Hardware name: Qualcomm Technologies, Inc. SA8775P Ride (DT)  \n  |  Call trace:  \n  |   dump_backtrace+0x94/0x114  \n  |   show_stack+0x18/0x24  \n  |   dump_stack_lvl+0x48/0x60  \n  |   print_report+0xf4/0x5b0  \n  |   kasan_report+0xa4/0xec  \n  |   __asan_report_load1_noabort+0x20/0x2c  \n  |   strncmp+0xe4/0xec  \n  |   scmi_bus_notifier+0x5c/0x54c  \n  |   notifier_call_chain+0xb4/0x31c  \n  |   blocking_notifier_call_chain+0x68/0x9c  \n  |   bus_notify+0x54/0x78  \n  |   device_del+0x1bc/0x840  \n  |   device_unregister+0x20/0xb4  \n  |   __scmi_device_destroy+0xac/0x280  \n  |   scmi_device_destroy+0x94/0xd0  \n  |   scmi_chan_setup+0x524/0x750  \n  |   scmi_probe+0x7fc/0x1508  \n  |   platform_probe+0xc4/0x19c  \n  |   really_probe+0x32c/0x99c  \n  |   __driver_probe_device+0x15c/0x3c4  \n  |   driver_probe_device+0x5c/0x170  \n  |   __driver_attach+0x1c8/0x440  \n  |   bus_for_each_dev+0xf4/0x178  \n  |   driver_attach+0x3c/0x58  \n  |   bus_add_driver+0x234/0x4d4  \n  |   driver_register+0xf4/0x3c0  \n  |   __platform_driver_register+0x60/0x88  \n  |   scmi_driver_init+0xb0/0x104  \n  |   do_one_initcall+0xb4/0x664  \n  |   kernel_init_freeable+0x3c8/0x894  \n  |   kernel_init+0x24/0x1e8  \n  |   ret_from_fork+0x10/0x20  \n  |  \n  |  Allocated by task 1:  \n  |   kasan_save_stack+0x2c/0x54  \n  |   kasan_set_track+0x2c/0x40  \n  |   kasan_save_alloc_info+0x24/0x34  \n  |   __kasan_kmalloc+0xa0/0xb8  \n  |   __kmalloc_node_track_caller+0x6c/0x104  \n  |   kstrdup+0x48/0x84  \n  |   kstrdup_const+0x34/0x40  \n  |   __scmi_device_create.part.0+0x8c/0x408  \n  |   scmi_device_create+0x104/0x370  \n  |   scmi_chan_setup+0x2a0/0x750  \n  |   scmi_probe+0x7fc/0x1508  \n  |   platform_probe+0xc4/0x19c  \n  |   really_probe+0x32c/0x99c  \n  |   __driver_probe_device+0x15c/0x3c4  \n  |   driver_probe_device+0x5c/0x170  \n  |   __driver_attach+0x1c8/0x440  \n  |   bus_for_each_dev+0xf4/0x178  \n  |   driver_attach+0x3c/0x58  \n  |   bus_add_driver+0x234/0x4d4  \n  |   driver_register+0xf4/0x3c0  \n  |   __platform_driver_register+0x60/0x88  \n  |   scmi_driver_init+0xb0/0x104  \n  |   do_one_initcall+0xb4/0x664  \n  |   kernel_init_freeable+0x3c8/0x894  \n  |   kernel_init+0x24/0x1e8  \n  |   ret_from_fork+0x10/0x20  \n  |  \n  |  Freed by task 1:  \n  |   kasan_save_stack+0x2c/0x54  \n  |   kasan_set_track+0x2c/0x40  \n  |   kasan_save_free_info+0x38/0x5c  \n  |   __kasan_slab_free+0xe8/0x164  \n  |   __kmem_cache_free+0x11c/0x230  \n  |   kfree+0x70/0x130  \n  |   kfree_const+0x20/0x40  \n  |   __scmi_device_destroy+0x70/0x280  \n  |   scmi_device_destroy+0x94/0xd0  \n  |   scmi_chan_setup+0x524/0x750  \n  |   scmi_probe+0x7fc/0x1508  \n  |   platform_probe+0xc4/0x19c  \n  |   really_probe+0x32c/0x99c  \n  |   __driver_probe_device+0x15c/0x3c4  \n  |   driver_probe_device+0x5c/0x170  \n  |   __driver_attach+0x1c8/0x440  \n  |   bus_for_each_dev+0xf4/0x178  \n  |   driver_attach+0x3c/0x58  \n  |   bus_add_driver+0x234/0x4d4  \n  |   driver_register+0xf4/0x3c0  \n  |   __platform_driver_register+0x60/0x88  \n  |   scmi_driver_init+0xb0/0x104  \n  |   do_one_initcall+0xb4/0x664  \n  |   kernel_init_freeable+0x3c8/0x894  \n  |   kernel_init+0x24/0x1e8  \n  |   ret_from_fork+0x10/0x20 \nSeverity: 0.0 | NA \nVisit the link for more details, suc[...]", "creation_timestamp": "2024-11-19T20:10:34.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb5f7bb7-c2cc-4a0c-a64a-19b361a3d8f4/export"/>
    <published>2024-11-19T20:10:34+00:00</published>
  </entry>
</feed>
