CVE-2022-50846

The CVE-2022-50846 entry concerns a Linux kernel issue in mmc: via-sdmmc where mmc_add_host() could return an error and its return value was ignored. The documented fix adds a proper check of the return value and an error path that calls mmc_free_host(), preventing a memory leak from mmc_alloc_ho...

CVE-2023-54189 pstore/ram: Add check for kstrdup

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2023-54189 pstore/ram: Add check for kstrdup

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2023-54185 btrfs: remove BUG_ON()'s in add_new_free_space()

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

CVE-2023-54185 btrfs: remove BUG_ON()'s in add_new_free_space()

In the Linux kernel, the following vulnerability has been resolved: btrfs: remove BUGON's in addnewfreespace At addnewfreespace we have these BUGON's that are there to deal with any failure to add free space to the in memory free space cache. Such failures are mostly -ENOMEM that should be very...

CVE-2023-54183 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

CVE-2023-54183 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-core: Fix a potential resource leak in v4l2fwnodeparselink If fwnodegraphgetremoteendpoint fails, 'fwnode' is known to be NULL, so fwnodehandleput is a no-op. Release the reference taken from a previous...

CVE-2022-50786 media: s5p-mfc: Clear workbit to handle error condition

In the Linux kernel, the following vulnerability has been resolved: media: s5p-mfc: Clear workbit to handle error condition During error on CLOSEINSTANCE command, ctxworkbits was not getting cleared. During consequent mfc execution NULL pointer dereferencing of this context led to kernel panic...

CVE-2022-50786

The CVE-2022-50786 fix applies to the Linux kernel media: s5p-mfc driver. The root cause was that on CLOSE_INSTANCE error paths, ctx_work_bits were not cleared, which could lead to a NULL pointer dereference in subsequent MFC processing and trigger a kernel panic. The patch ensures ctx_work_bits ...

CVE-2022-50786 media: s5p-mfc: Clear workbit to handle error condition

In the Linux kernel, the following vulnerability has been resolved: media: s5p-mfc: Clear workbit to handle error condition During error on CLOSEINSTANCE command, ctxworkbits was not getting cleared. During consequent mfc execution NULL pointer dereferencing of this context led to kernel panic...

PT-2025-53926

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a NULL pointer dereference could occur, leading to a kernel panic. This issue arises from a failure to clear ctx work bits during an error conditi...

PT-2025-54018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the pstore/ram component. A missing check for the return value of the kstrdup function could lead to a NULL pointer dereference. The fix involves...

PT-2025-54046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A fix addresses an issue in the Linux kernel related to reverting a commit intended to improve workqueue handling within the DRM/MSM subsystem. The original patch introduced NULL-pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992526 advisory. In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmapzalloc must be balanced by a correspondi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992510 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rioadddevice fails Patch series rapidio: fix three possible...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992163 advisory. In the Linux kernel, the following vulnerability has been resolved: chardev: fix error handling in cdevdeviceadd While doing fault injection test, I got the followin...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a missing unpacking jump in error handling that could lead to a null pointer dereference...

PT-2025-54012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the v4l2-core subsystem, specifically within the v4l2 fwnode parse link function. A resource leak can occur if fwnode graph get remote endpoint fails,...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992279 advisory. In the Linux kernel, the following vulnerability has been resolved: intelth: Fix a resource leak in an error handling path If an error occurs after calling...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992414 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of...