UBUNTU-CVE-2023-53504

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Properly order ibdeviceunalloc to avoid UAF ibdeallocdevice should be called only after device cleanup. Fix the dealloc sequence...

UBUNTU-CVE-2023-53528

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If createqp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch...

UBUNTU-CVE-2022-50431

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocates memory for name, it need be freed when ofdeviceregister fails, call soundbusdevput to give up the reference that hold in...

CVE-2023-53518 PM / devfreq: Fix leak in devfreq_dev_release()

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreqdevrelease srcuinitnotifierhead allocates resources that need to be released with a srcucleanupnotifierhead call. Reported by kmemleak...

CVE-2023-53518 PM / devfreq: Fix leak in devfreq_dev_release()

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreqdevrelease srcuinitnotifierhead allocates resources that need to be released with a srcucleanupnotifierhead call. Reported by kmemleak...

CVE-2023-53504

Technical details for CVE-2023-53504 are not publicly available in the provided documents; monitor for updates.

CVE-2023-53504 RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Properly order ibdeviceunalloc to avoid UAF ibdeallocdevice should be called only after device cleanup. Fix the dealloc sequence...

CVE-2022-50469 staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential memory leak in rtwinitdrvsw In rtwinitdrvsw, there are various init functions are called to populate the padapter structure and some checks for their return value. However, except for the first o...

CVE-2022-50463

In the Linux kernel, CVE-2022-50463 is due to a resource leak in the mpc52xx_lpbfifo_probe() error path on powerpc/52xx where a request_irq() is not balanced by a free_irq(). The patch adds the missing free_irq() call (matching behavior already present in the remove path). This affects the error-...

CVE-2022-50452

CVE-2022-50452 describes a null-pointer dereference in the Linux kernel net:sched: cake path during cake_init() failure. If the default qdisc is cake and mqprio_init() fails, cake_reset() clears resources but q->tins remains NULL, leading to a NULL dereference in cake_dequeue_one(). The connec...

CVE-2023-53461 io_uring: wait interruptibly for request completions on exit

In the Linux kernel, the following vulnerability has been resolved: iouring: wait interruptibly for request completions on exit WHen the ring exits, cleanup is done and the final cancelation and waiting on completions is done by ioringexitwork. That function is invoked by kworker, which doesn't...

CVE-2023-53460

CVE-2023-53460 describes a memory-leak in the Linux kernel wifi driver rt w88 (rtw_usb_probe) in drivers/net/wireless/realtek/rtw88/usb.c:876, where an allocated hw structure may not be released on a path, reported as the line 811 release issue. The root cause is a leak in the USB probe path (rtw...

CVE-2022-50431

CVE-2022-50431 : Linux kernel patch fixes a memory-leak in ALSA aoa i2sbus handling. The issue stems from dev_set_name() allocating memory for the name in soundbus_add_one() and not freeing it if of_device_register() fails; the fix adds soundbus_dev_put() and frees resources in i2sbus_release_dev...

CVE-2022-50431 ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocates memory for name, it need be freed when ofdeviceregister fails, call soundbusdevput to give up the reference that hold in...

kernel: smb: client: fix use-after-free in cifs_oplock_break

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifsoplockbreak A race condition can occur in cifsoplockbreak leading to a use-after-free of the cinode structure when unmounting: cifsoplockbreak cifsFileInfoputcfile cifsFileInfoputfinal...

Codazon Magento Themes security vulnerabilities

Codazon Magento Themes is a series of Magento platform-specific website themes and templates from Codazon. A security vulnerability exists in Codazon Magento Themes versions v1.1.0.0 through v2.4.7, which stems from insufficient cat parameter cleanup and escaping, and could lead to a reflective...

WordPress plugin ZoloBlocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly sequenced device cleanup, which could lead to reuse after release...

kernel: ALSA: bcd2000: Fix a UAF bug on the error path of probing

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Behringer BCD2000 driver. A local user could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. This issue occurs when device initialization fails during...

WordPress plugin Nexa Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...