CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...

CVE-2022-49011 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2022-49011 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2022-49011

CVE-2022-49011 involves a leak in the Linux kernel hwmon/coretemp code: the PCI device refcount was not decremented after use in nv1a_ram_new(), causing a refcount leak. The root cause is the PCI API’s behavior of returning a device with an incremented refcount, requiring the caller to call pci_d...

CVE-2022-49011 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot says, it returns a pci device with refcount increment, when finish using it, the caller must decrement the reference count by calling...

CVE-2022-49010 hwmon: (coretemp) Check for null before removing sysfs attrs

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then pdata-coredataindx is already NULL and has been kfreed. Don't pass that to sysfsremovegroup as that will crash in sysfsremovegroup...

CVE-2022-49010 hwmon: (coretemp) Check for null before removing sysfs attrs

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then pdata-coredataindx is already NULL and has been kfreed. Don't pass that to sysfsremovegroup as that will crash in sysfsremovegroup...

CVE-2022-49010

CVE-2022-49010 (Linux kernel) has concrete technical details in connected advisories. The issue arises in hwmon coretemp handling: if coretemp_add_core() fails, pdata->core_data[indx] may already be NULL and freed, and passing that to sysfs_remove_group() could crash. The fix is to check for N...

CVE-2022-49009 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

CVE-2022-49009 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

CVE-2022-49009 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

CVE-2022-49009

The CVE-2022-49009 issue affects the Linux kernel component hwmon:asus-ec-sensors, where devm_kcalloc may return NULL and the return value must be checked to avoid NULL pointer dereference. The provided documents confirm a resolved vulnerability with a fix implementing checks for the NULL return ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a PCI device reference count leak in the hwmon subsystem nv1aramnew function...

Oracle Linux 9 : kernel (ELSA-2024-8162)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-8162 advisory. - gfs2: Fix NULL pointer dereference in gfs2logflush CKI Backport Bot RHEL-51561 RHEL-51559 CVE-2024-42079 - KVM: SVM: WARN on vNMI + NMI window iff NM...

kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver for the w83792d module where a NULL pointer dereference was caused by the lm75 obsolete structure field. During specific device read operations, if certain conditions are met, the driver may attempt to access a NULL pointer because this...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver for the w83792d module where a NULL pointer dereference was caused by the lm75 obsolete structure field. During specific device read operations, if certain conditions are met, the driver may attempt to access a NULL pointer because this...

kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver for the w83792d module where a NULL pointer dereference was caused by the lm75 obsolete structure field. During specific device read operations, if certain conditions are met, the driver may attempt to access a NULL pointer because this...

RHEL 9 : kernel (RHSA-2024:8157)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8157 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Local information disclosure o...