Wonder how many of these NSA and others been sitting on, for how long and how many are still there? I guess the silver lining with the aixplosion of CVEs is that software eventually will get more secure.
Now they just give almost every bug a CVE number.
> In the Linux kernel, the following vulnerability has been resolved:
> usb: typec: ucsi: unregister debugfs entries on teardown
> ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() keeps them around until ucsi_destroy().
> Drivers like ucsi_glink that unregister/register the same UCSI instance across remoteproc restart then try to create an already existing debugfs directory and log:
> debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi'
> Unregister debugfs entries as part of ucsi_unregister(), and clear ucsi->debugfs after freeing it so repeated unregister paths remain safe.
I'm going to need someone to explain how that could possibly become a "vulnerability".