GSD-2023-1000280 drm/shmem-helper: Remove errant put in error path

drm/shmem-helper: Remove errant put in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.227 by commit...

GSD-2023-1000141 drm/shmem-helper: Remove errant put in error path

drm/shmem-helper: Remove errant put in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 by commit...

PT-2023-33565 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the s5p-mfc media component in the Linux Kernel, where a clear workbit is not handled properly in an error condition. The actual impact and potential for attack have...

PT-2023-33218 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to an errant put in the error path of the drm/shmem-helper. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2025-37554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the VXLAN implementation of the Linux kernel. The memory allocated by vxlan vnigroup init is not freed in the error path, leading to memory leaks. This can be...

PT-2025-37642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a percpu counter block can be leaked on an error path when creating a new network namespace. This leak occurs during the allocation of the counte...

PT-2022-7518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the workqueue enabling process in the Linux kernel. When the driver is removed, it assumes that the workqueue was enabled successfully and attempts to free...

PT-2025-40146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ethernet subsystem, specifically within the ti am65-cpsw driver. The issue involves a potential PM runtime leakage within the am65 cpsw nuss ndo slave...

GSD-2022-1008182 capabilities: fix potential memleak on error path from vfs_getxattr_alloc()

capabilities: fix potential memleak on error path from vfsgetxattralloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...

PT-2024-11824 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the tbnet open function. This issue occurs when tb ring alloc rx fails, causing the ida allocated in tb...

PT-2022-36566 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: The issue is related to a potential memory leak on the error path from the vfs getxattr alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-36230 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: The issue concerns a potential memory leak on the error path from the vfs getxattr alloc function. This problem was introduced in version v4.14 and is fixed in Linux Kernel version v5.15.78...

PT-2022-36078 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue concerns a potential memory leak on the error path from the vfs getxattr alloc function. This problem was introduced in version v4.14 and is fixed in Linux Kernel version v6.0.8. Th...

PT-2025-37613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak was resolved in the cxl calc capp routing function within the Linux kernel. The of get next parent function increments the reference count of a node pointer, and a...

PT-2025-41042

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rpi firmware probe function when mbox request channel fails. Specifically, the firmware is not freed through rpi firmware delete, leading to a memory leak. Th...

PT-2025-37518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the socfpga gate init function within the clock clk subsystem of the Linux kernel. The fix involves freeing the @socfpga clk and @ops memory...

PT-2025-38367

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mtk drm bind function may fail, leading to a dangling pointer within the private object. If a suspend operation is triggered after this failure, the pointer is passed to DRM via the...

Xenstore: Guests can crash xenstored (XSA-414)

Xenstore: a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of xenstored or a memory corruption in xenstored causing further damage. Entering the error path can be controlled by the guest e.g. by exceeding the quota value of...

kernel: net: nexthop: fix null pointer dereference when IPv6 is not enabled

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled !CONFIGIPV6 we'll hit a NULL pointer dereference1 in the error path of nhcreateipv6 due to calling...

kernel: netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...