CVE-2022-50837 net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag8021q: avoid leaking ctx on dsatag8021qregister error path If dsatag8021qsetup fails, for example due to the inability of the device to install a VLAN, the tag8021q context of the switch will leak. Make sure it is...

CVE-2022-50836 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev The kfree should be called when ofirqgetbyname fails or devmrequestthreadedirq fails in qcomaddsysmonsubdev, otherwise there will be a memory leak, so add kfree to fix it...

CVE-2022-50836 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev The kfree should be called when ofirqgetbyname fails or devmrequestthreadedirq fails in qcomaddsysmonsubdev, otherwise there will be a memory leak, so add kfree to fix it...

CVE-2022-50836

The CVE-2022-50836 issue in the Linux kernel’s remoteproc: sysmon subsystem (qcom_add_sysmon_subdev) caused a memory leak. Root cause: kfree() was not invoked when of_irq_get_byname() or devm_request_threaded_irq() failed, leading to leaked memory. The fix adds a kfree() path to ensure proper cle...

CVE-2023-54201 RDMA/efa: Fix wrong resources deallocation order

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

CVE-2023-54201

CVE-2023-54201 (RDMA/efa) in the Linux kernel fixed an incorrect resource-deallocation order when destroying QP/CQ. The patch ensures resources are deallocated in reverse allocation order; otherwise a device failure can leave the object partially destroyed, allowing a second destroy attempt that ...

CVE-2023-54191 wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix memory leak in mt7996mcuexit Always purge mcu skb queues in mt7996mcuexit routine even if mt7996firmwarestate fails...

CVE-2023-54191

The CVE-2023-54191 issue affects the Linux kernel MT76 wifi driver (mt7996). A memory leak occurs when mt7996_mcu_exit fails to purge mcu skb queues if mt7996_firmware_state fails, potentially enabling local DoS through memory exhaustion. Public bulletins from Red Hat and OSV family sources descr...

CVE-2023-54183

CVE-2023-54183 : Linux kernel media: v4l2-core: fixes a potential resource leak in v4l2_fwnode_parse_link() and related error paths. The patch adds an error handling path and uses already-ref counted fwnodes correctly (releasing references when upstream calls fail). Impact described as resource l...

CVE-2023-54178 of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix null pointer dereferencing in ofunittestfindnodebyname when kmalloc fail to allocate memory in kasprintf, name or fullname will be NULL, strcmp will cause null pointer dereference...

CVE-2023-54169

Technical details on CVE-2023-54169 (affected products/versions, root cause specifics, exploitability, and fixes) are not publicly provided in the supplied documents. Monitor for updates and official advisories.

CVE-2022-50825 usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...

CVE-2022-50819

The CVE-2022-50819 vulnerability affects the Linux kernel’s udmabuf/dma-buf path. If the sg table creation fails, ubuf->sg must be set to NULL; otherwise, closing the dmabuf fd can trigger a use-after-free/null-deref in release_udmabuf, causing a crash. The issue was addressed by ensuring ubuf...

CVE-2022-50820 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()

In the Linux kernel, the following vulnerability has been resolved: perf/armdmc620: Fix hotplug callback leak in dmc620pmuinit dmc620pmuinit won't remove the callback added by cpuhpsetupstatemulti when platformdriverregister failed. Remove the callback by cpuhpremovemultistate in fail path. Simil...

CVE-2022-50813 drivers: mcb: fix resource leak in mcb_probe()

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

CVE-2022-50813 drivers: mcb: fix resource leak in mcb_probe()

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcbprobe When probe hook function failed in mcbprobe, it doesn't put the device. Compiled test only...

CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50810 rapidio: devices: fix missing put_device in mport_cdev_open

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing putdevice in mportcdevopen When kfifoalloc fails, the refcount of chdev-dev is left incremental. We should use putdevice&chdev-dev to decrease the ref count of chdev-dev to avoid refcount leak...

CVE-2022-50784

The CVE-2022-50784 issue affects the Linux kernel in the wifi/iwlwifi/mei path, where a NULL-pointer dereference can occur after attempting to clone an SKB. If SKB cloning fails, the code may proceed to use the invalid SKB instead of aborting, risking a system crash or instability. The vulnerabil...