kernel: media: pvrusb2: fix memory leak in pvr_probe

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix memory leak in pvrprobe The error handling code in pvr2hdwcreate forgets to unregister the v4l2 device. When pvr2hdwcreate returns back to pvr2contextcreate, it calls pvr2contextdestroy to destroy context, but...

kernel: Linux kernel: Denial of Service in ASoC Mediatek due to refcount leak

A flaw was found in the Linux kernel. A local user could exploit a refcount leak in the Audio System on Chip ASoC Mediatek component, specifically within the mt8183mt6358ts3a227max98357devprobe function. This vulnerability could lead to a Denial of Service DoS due to resource exhaustion...

kernel: net/mlx5: Fix command stats access after free

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command stats access after free Command may fail while driver is reloading and can't accept FW commands till command interface is reinitialized. Such command failure is being logged to command stats. This results in...

GSD-2022-1002829 media: i2c: dw9714: Disable the regulator when the driver fails to probe

media: i2c: dw9714: Disable the regulator when the driver fails to probe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31092

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists where the regulator is not disabled when the driver fails to probe. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-29834

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns error handling in the sam9x5 wm8731 driver probe function. It was introduced in version v3.12 and fixed in version v5.16.19. The actual impact and attack plausibility have...

PT-2022-29525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns error handling in the sam9x5 wm8731 driver probe function. It was introduced in version v3.12 and fixed in version v5.17.2. The actual impact and attack plausibility have no...

PT-2022-30375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns error handling in the sam9x5 wm8731 driver probe function. It was introduced in version v3.12 and fixed in version v5.10.110. The actual impact and attack plausibility hav...

PT-2022-30143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns error handling in the sam9x5 wm8731 driver probe function. It was introduced in version v3.12 and fixed in version v5.15.33. The actual impact and attack plausibility have...

CVE-2018-11823

CVE-2018-11823 affects CAF Android releases (Android for MSM, Firefox OS for MSM, QRD Android) based on the Linux kernel. The vulnerability is a double-free in the power module triggered by freeing device memory during driver probe failure. Root cause described as improper memory handling in the ...

Double free

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, freeing device memory in driver probe failure will result in double free issue in power module...

PT-2018-10445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a double free of memory allocation in the Kernel. This occurs when the Kernel explicitly attempts to free memory that has already been automatically freed on driver...

CVE-2018-11276: Double Free

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, double free of memory allocation is possible in Kernel when it explicitly tries to free that memory on driver probe failure, since memory allocated is automatically freed on probe...

Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...